PT-2024-26358 · Unknown · Jupyter Server

Nvn1729 · Published 2024-06-06 · Updated 2024-11-01 · CVE-2024-35178

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Jupyter Server versions prior to 2.14.1

Description The Jupyter Server on Windows has a vulnerability that lets unauthenticated attackers leak the NTLMv2 password hash of the Windows user running the Jupyter server. An attacker can crack this password to gain access to the Windows machine hosting the Jupyter server, or access other network-accessible machines or 3rd party services using that credential. Alternatively, an attacker can perform an NTLM relay attack without cracking the credential to gain access to other network-accessible machines.

Recommendations For versions prior to 2.14.1, update to version 2.14.1 to resolve the issue. As a temporary workaround, consider restricting access to the Jupyter server to minimize the risk of exploitation.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2024-35178

GHSA-HRW6-WG82-CM62

OESA-2024-2308

PYSEC-2024-165

Affected Products

Jupyter Server

References · 20

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/35xxx/CVE-2024-35178.json · Exploit
• https://github.com/jupyter-server/jupyter_server/commit/79fbf801c5908f4d1d9bc90004b74cfaaeeed2df · Patch
• https://github.com/jupyter-server/jupyter_server/security/advisories/GHSA-hrw6-wg82-cm62 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-35178 · Security Note
• https://osv.dev/vulnerability/OESA-2024-2308 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-hrw6-wg82-cm62 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-35178 · Security Note
• https://ubuntu.com/security/CVE-2024-35178 · Vendor Advisory
• https://osv.dev/vulnerability/PYSEC-2024-165 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-35178 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-35178 · Vendor Advisory
• https://github.com/jupyter-server/jupyter_server · Note
• https://github.com/pypa/advisory-database/tree/main/vulns/jupyter-server/PYSEC-2024-165.yaml · Note
• https://openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2308 · Note
• https://twitter.com/Horizon3Attack/status/1826990785608208482 · Twitter Post