Description
NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker may submit crafted token-revocation lists. A successful exploit may lead to data tampering and denial of service.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NVIDIA | AIStore framework | 0 to 4.9 | — |