Vulnerabilities > CVE-2023-23929 - Unspecified vulnerability in Vantage6

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
vantage6
NVD
Published: 2023-03-04
Updated: 2024-11-21

Summary

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Currently, the refresh token is valid indefinitely. The refresh token should get a validity of 24-48 hours. A fix was released in version 3.8.0.

Vulnerable Configurations

Part Description Count
Application
Vantage6
44

References