Unauthenticated Attacker Can Leak NTLMv2 Password Hash and Gain Access to Windows Machine or Other Network-Accessible Machines

CVE-2024-35178

What is CVE-2024-35178?

A vulnerability in Jupyter Server running on Windows allows unauthenticated attackers to exploit a weakness to leak the NTLMv2 password hash of the Windows user operating the Jupyter Server. This exposure enables attackers to potentially crack the password, gaining unauthorized access to the hosting Windows machine or other network-accessible resources. Furthermore, via NTLM relay attacks, an attacker may exploit this vulnerability to access additional network machines or third-party services without needing to crack the credential. The issue has been addressed in Jupyter Server version 2.14.1.

References