← CVE Intelligence

CVE-2022-31604

NVIDIA / NVIDIA FLARE PUBLISHED

Description (CNA)

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

Affected (CNA)

Vendor / productVersions
NVIDIA / NVIDIA FLAREaffected All versions prior to 2.1.2

CWE

CWE-502

References

ADP enrichment

CVE

No English description supplied.