CVE-2025-0508CWE-328

MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk

Medium · published March 20, 2025

CVSS v3.0
5.9
EPSS
0%
Percentile
17.3
In the wild
Unconfirmed
What it is

A vulnerability in the SageMaker Workflow component of aws/sagemaker-python-sdk allows for the possibility of MD5 hash collisions in all versions. This can lead to workflows being inadvertently replaced due to the reuse of results from different configurations that produce the same MD5 hash. This issue can cause integrity problems within the pipeline, potentially leading to erroneous processing outcomes.

The record
Technical detail
CVSS v3.0
5.9 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00265 · 17.3th percentile
Weakness
CWE-328 · Use of Weak Hash
Published
2025-03-20T10:11Z
EPSS history
Timeline
  • 20 MAR 10:11Z
    MD5 Hash Collision in SageMaker Workflow in aws/sagemaker-python-sdk
    cvelistv5