Description (CNA)
vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| vantage6 / vantage6 | affected < 3.8.0 |
CWE
CWE-613
References
- https://github.com/vantage6/vantage6/security/advisories/GHSA-4w59-c3gc-rrhp
- https://github.com/vantage6/vantage6/commit/48ebfca42359e9a6743e9598684585e2522cdce8
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.