{"document":{"aggregate_severity":{"namespace":"https://www.suse.com/support/security/rating/","text":"important"},"category":"csaf_vex","csaf_version":"2.0","distribution":{"text":"Copyright 2024 SUSE LLC. All rights reserved.","tlp":{"label":"WHITE","url":"https://www.first.org/tlp/"}},"lang":"en","notes":[{"category":"summary","text":"SUSE CVE-2022-24758","title":"Title"},{"category":"description","text":"The Jupyter notebook is a web-based notebook environment for interactive computing. Prior to version 6.4.9, unauthorized actors can access sensitive information from server logs. Anytime a 5xx error is triggered, the auth cookie and other header values are recorded in Jupyter server logs by default. Considering these logs do not require root access, an attacker can monitor these logs, steal sensitive auth/cookie information, and gain access to the Jupyter server. Jupyter notebook version 6.4.x contains a patch for this issue. There are currently no known workarounds.","title":"Description of the CVE"},{"category":"legal_disclaimer","text":"CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).","title":"Terms of use"}],"publisher":{"category":"vendor","contact_details":"https://www.suse.com/support/security/contact/","name":"SUSE Product Security Team","namespace":"https://www.suse.com/"},"references":[{"category":"external","summary":"CVE-2022-24758","url":"https://www.suse.com/security/cve/CVE-2022-24758"},{"category":"external","summary":"SUSE Security Ratings","url":"https://www.suse.com/support/security/rating/"},{"category":"external","summary":"SUSE Bug 1198203 for CVE-2022-24758","url":"https://bugzilla.suse.com/1198203"}],"title":"SUSE CVE CVE-2022-24758","tracking":{"current_release_date":"2025-04-25T03:44:53Z","generator":{"date":"2023-02-15T03:27:40Z","engine":{"name":"cve-database.git:bin/generate-csaf-vex.pl","version":"1"}},"id":"CVE-2022-24758","initial_release_date":"2023-02-15T03:27:40Z","revision_history":[{"date":"2023-02-15T03:27:40Z","number":"2","summary":"Current version"},{"date":"2025-01-01T03:11:29Z","number":"3","summary":"Current version"},{"date":"2025-02-14T07:54:47Z","number":"4","summary":"Current version"},{"date":"2025-02-16T07:36:24Z","number":"5","summary":"Current version"},{"date":"2025-04-25T03:44:53Z","number":"6","summary":"Current version"}],"status":"interim","version":"6"}}}