CVE-2024-34997: High severity ibm cloud pak for security vulnerability
joblib could allow a local authenticated attacker to execute arbitrary code on the system, caused by an unsafe deserialization in the pickle.load() function. By sending specially crafted request, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Other sources
joblib v1.4.2 was discovered to contain a deserialization vulnerability via the component joblib.numpypickle::NumpyArrayWrapper().readarray(). NOTE: this is disputed by the supplier because NumpyArrayWrapper is only used during caching of trusted content.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-34997?
CVE-2024-34997 is considered a high severity vulnerability due to its potential for arbitrary code execution.
How do I fix CVE-2024-34997?
To fix CVE-2024-34997, you should upgrade to the latest version of joblib that addresses this deserialization issue.
Who is affected by CVE-2024-34997?
CVE-2024-34997 affects users of IBM Cloud Pak for Security versions 1.10.0.0 to 1.10.11.0 and IBM QRadar Suite Software versions 1.10.12.0 to 1.10.22.0.
What causes CVE-2024-34997?
CVE-2024-34997 is caused by an unsafe deserialization vulnerability in the pickle.load() function of joblib.
Can CVE-2024-34997 be exploited remotely?
CVE-2024-34997 requires local authenticated access, so it cannot be exploited remotely without prior access.