CVE-2024-8072: Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Published Aug 22, 2024
·Updated
Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users
Affected Software
2 affected components
pip/mage-ai<=0.9.73
Mage Mage-ai Python
Event History
Aug 22, 2024
CVE Published
via MITRE·07:52 AM
Data Sourced
via MITRE·07:52 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
Affected Software
Advisory Published
via GitHub·09:30 AM
Frequently Asked Questions
1
What is the severity of CVE-2024-8072?
CVE-2024-8072 is considered high severity due to the potential for remote unauthenticated attackers to leak sensitive information.
2
How do I fix CVE-2024-8072?
To fix CVE-2024-8072, update Mage AI to version 0.9.74 or later.
3
What does CVE-2024-8072 allow attackers to do?
CVE-2024-8072 allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users.
4
Is my system vulnerable to CVE-2024-8072?
If you are using Mage AI version 0.9.73 or earlier, your system is vulnerable to CVE-2024-8072.
5
What are the implications of CVE-2024-8072?
The implications of CVE-2024-8072 include potential information disclosure that could lead to further attacks or exploitation.