Information disclosure in Jupyter Server
CVE-2024-35178
The Jupyter Server provides the backend for Jupyter web applications. Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows machine hosting the Jupyter server, or access other network-accessible machines or 3rd party services using that credential. Or an attacker perform an NTLM relay attack without cracking the credential to gain access to other network-accessible machines. This vulnerability is fixed in 2.14.1.
Vulnerability class: Information Disclosure
EPSS: 0.007 (51.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Jupyter Jupyter_server
- Jupyter-server Jupyter_server — versions < 2.14.1
- Microsoft Windows
Weakness classification (CWE)
Public proof-of-concept exploits
References
- security-advisories@github.com (x_refsource_CONFIRM, Vendor Advisory)
- security-advisories@github.com (Patch, x_refsource_MISC)
Frequently asked questions
- What is CVE-2024-35178?
- CVE-2024-35178 is a high-severity vulnerability in Jupyter Server, classified under Information Disclosure. CVSS score: 7.5/10. Published 2024-06-06.
- How severe is CVE-2024-35178?
- High severity. CVSS v3 base score is 7.5 out of 10.
- Is CVE-2024-35178 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.