Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-07864
HistoryFeb 04, 2024 - 12:00 a.m.

Unspecified vulnerability in vantage6 (CNVD-2024-07864)

2024-02-0400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
vantage6
security vulnerability
username discovery
response time
privacy preserving
federal learning infrastructure
cnvd-2024-07864

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%

vantage6 is vantage6 open source an open source priVAcy preserviNg federalTed leArningG infrastructure for Secure Insight eXchange. A security vulnerability previously existed in vantage6 version 4.2.0 that stemmed from the ability to find out a username from the response time of a login request. No details of the vulnerability are provided at this time.

CPENameOperatorVersion
vantage6 vantage6lt4.2.0

6.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.0%