Database/Control plane, storage & DevOps
Intel Neural Compressor: Unauthenticated input-validation failure leading to escalation of privilege in Neural
CVSS 7.5CVE-2024-28028Control plane, storage & DevOpscurated
Impact
Unauthenticated input-validation failure leading to escalation of privilege in Neural Compressor. Another reason not to leave the optimisation service on an open cluster network.
Who can reach it
Unauthenticated, network-reachable where the service is exposed.
What to do
Upgrade to v3.0 or later and gate the service behind auth and network policy.
References
Related entries
- Intel Neural Compressor: Input-validation failure reachable by an authenticated user, ending in privilege escalationCVE-2024-36284 · Intel Neural CompressorMedium
- Intel Neural Compressor: An unauthenticated user can reach an input-validation failure in Neural CompressorCVE-2024-22476 · Intel Neural CompressorCritical
- Brocade SANnav OVA appliance image, before v2.3.1 and v2.3.0a: Three defects that together mean every SANnav OVACVE-2024-29966 · Brocade SANnav OVA appliance image, before v2.3.1 and v2.3.0aHigh
- AMD - DIMM SPD address aliasing bypassing SMM isolation (AMD-SB-3014): The BadRAM SPD-aliasing technique aimed atCVE-2024-36354 · AMD - DIMM SPD address aliasing bypassing SMM isolation (AMD-SB-3014)High
- Ceph RADOS Gateway (RGW): One malformed PUT kills the radosgw process. Sending an object copy with an emptyCVE-2024-47866 · Ceph RADOS Gateway (RGW)High
- Sonatype Nexus Repository 3: Unauthenticated path traversalCVE-2024-4956 · Sonatype Nexus Repository 3High
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.