Description
MLflow is an open source platform for managing the end-to-end machine learning lifecycle
Acunetix determined that it was possible to access MLflow API without authentication.
Remediation
Enable authentication for MLflow
References
Related Vulnerabilities
MySQL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-14641)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-5730)
phpMyAdmin Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2039)
Spring Boot Misconfiguration: Datasource credentials stored in the properties file
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9411)