GHSA-gvqv-h7hh-6fccMediumCVSS 6.0
Allegro AI ClearML Stores Credentials in Plaintext in MongoDB Instance
🔗 CVE IDs covered (1)
📋 Description
Allegro AI’s open-source version of ClearML stores passwords in plaintext within the MongoDB instance, resulting in a compromised server leaking all user emails and passwords.
🎯 Affected products1
- pip/clearml:<= 1.14.2