CVE-2022-24758

The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds.

CVSS v3 7.5 HIGH
CVSS v2.0 5.0 MEDIUM

7.5^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55	Third Party Advisory
https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55	Third Party Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:jupyter:notebook:*:*:*:*:*:*:*:*

History

21 Nov 2024, 06:51

Type	Values Removed	Values Added
References	~~() https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55 - Third Party Advisory~~	() https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55 - Third Party Advisory

Information

Published : 2022-03-31 23:15

Updated : 2024-11-21 06:51

NVD link : CVE-2022-24758

Mitre link : CVE-2022-24758

CVE.ORG link : CVE-2022-24758

JSON object : View

Products Affected

jupyter

notebook

CWE

CWE-532

Insertion of Sensitive Information into Log File

{"id": "CVE-2022-24758", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Secondary", "source": "security-advisories@github.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2022-03-31T23:15:07.997", "references": [{"url": "https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55", "tags": ["Third Party Advisory"], "source": "security-advisories@github.com"}, {"url": "https://github.com/jupyter/notebook/security/advisories/GHSA-m87f-39q9-6f55", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "security-advisories@github.com", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds."}, {"lang": "es", "value": "Jupyter notebook es un entorno de cuaderno basado en la web para la computaci\u00f3n interactiva. En versiones anteriores a 6.4.9, actores no autorizados pueden acceder a informaci\u00f3n confidencial de los registros del servidor. Cada vez que es producido un error 5xx, la cookie de autenticidad y otros valores de encabezados son registrados por defecto en los registros del servidor Jupyter. Teniendo en cuenta que estos registros no requieren acceso de root, un atacante puede monitorear estos registros, robar informaci\u00f3n confidencial de auth/cookie, y conseguir acceso al servidor Jupyter. Jupyter notebook versi\u00f3n 6.4.x, contiene un parche para este problema. Actualmente no se presentan medidas de mitigaci\u00f3n conocidas"}], "lastModified": "2024-11-21T06:51:01.887", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:jupyter:notebook:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5D2C112-8A9C-4C77-B6E9-FE884960EA83", "versionEndExcluding": "6.4.10"}], "operator": "OR"}]}], "sourceIdentifier": "security-advisories@github.com"}