Vulnerabilities > CVE-2020-25459 - Exposure of Resource to Wrong Sphere vulnerability in Webank Federated AI Technology Enabler
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
An issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology Enabler) 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |