← volver
CVE-2024-21649

Remote code execution

CVSS 8.8 HIGHEPSS 1.3%CWE-94
The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning (FL) and Multi-Party Computation (MPC). Prior to 4.2.0, authenticated users could inject code into algorithm environment variables, resulting in remote code execution. This vulnerability is patched in 4.2.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Productos afectados
vantage6 · vantage6

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →