Security feature bypass

2024-01-3016:15:00

PRIOn knowledge base

www.prio-n.com

vantage6

privacy technology

username exposure

vulnerability

patched

4.2.0

6.9 Medium

AI Score

Confidence

Low

0.0005 Low

EPSS

Percentile

17.0%

JSON

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). It is possible to find out usernames from the response time of login requests. This could aid attackers in credential attacks. Version 4.2.0 patches this vulnerability.