NVIDIA AIStore AuthN Component Privilege Escalation, Information Disclosure, and Data Tampering Vulnerability

A vulnerability exists in the AuthN component of NVIDIA AIStore, affecting all versions prior to 3.31. This vulnerability could be exploited to escalate privileges, disclose information, and tamper with data.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing users to gain elevated rights or access. Additionally, it could result in unauthorized information disclosure and data tampering, compromising the integrity and confidentiality of the data.

Remediation

Users are advised to update to version 3.31 of the AIStore AuthN component. The latest version can be downloaded from the NVIDIA Docker Hub.