AI framework vulnerability is being used to compromise enterprise servers (CVE-2023-48022)

ronjor · Mar 28, 2024

Zeljka Zorz, Editor-in-Chief, Help Net Security March 27, 2024

Attackers are leveraging a vulnerability (CVE-2023-48022) in Anyscale’s Ray AI software to compromise enterprise servers and saddle them with cryptominers and reverse shells.
Click to expand...

UPDATE (March 28, 2024, 06:45 a.m. ET):

“If Ray is installed with its default configuration or in accordance with our documentation, it is not subject to this vulnerability. However, not every user does it that way, and we want to equip our users with additional tools that enable them to avoid accidental exposure,” an Anyscale spokesperson told Help Net Security.
Click to expand...

Log in or Sign up

AI framework vulnerability is being used to compromise enterprise servers (CVE-2023-48022)

ronjor Global Moderator

Log in or Sign up

AI framework vulnerability is being used to compromise enterprise servers (CVE-2023-48022)

ronjor Global Moderator

Useful Searches