GHSA-gvqv-h7hh-6fccMediumCVSS 6.0

Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance

Published
February 6, 2024
Last Modified
February 13, 2024

🔗 CVE IDs covered (1)

📋 Description

Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.

🎯 Affected products1

  • pip/clearml:<= 1.14.2

🔗 References (3)