PT-2022-8712

CVE-2020-25459

·

Published

2021-01-22

·

Updated

2022-06-28

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions WeBank FATE (Federated AI Technology Enabler) versions 0.1 through 1.4.2
Description An issue in the sync tree function in hetero decision tree guest.py allows attackers to read sensitive information during the training process of machine learning joint modeling.
Recommendations For WeBank FATE (Federated AI Technology Enabler) versions 0.1 through 1.4.2, consider disabling the sync tree function in hetero decision tree guest.py as a temporary workaround until a patch is available.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-668: Exposure of Resource to Wrong Sphere
Related identifiers
CVE-2020-25459
MGASA-2021-0049
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com