vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to manage data properly, but also to prevent a potential (but unlikely) side-effect that affects versions prior to 4.0.0, where if a collaboration with id=10 is deleted, and subsequently a new collaboration is created with id=10, the authenticated users in that collaboration could potentially see results of the deleted collaboration in some cases. Version 4.0.0 contains a patch for this issue. There are no known workarounds.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Vantage6 |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-0258 | vantage6 is privacy preserving federated learning infrastructure. When a collaboration is deleted, the linked resources (such as tasks from that collaboration) should be deleted. This is partly to manage data properly, but also to prevent a potential (but unlikely) side-effect that affects versions prior to 4.0.0, where if a collaboration with id=10 is deleted, and subsequently a new collaboration is created with id=10, the authenticated users in that collaboration could potentially see results of the deleted collaboration in some cases. Version 4.0.0 contains a patch for this issue. There are no known workarounds. |
 Github GHSA |
GHSA-rf54-7qrr-96j6 | vantage6 does not properly delete linked resources when deleting a collaboration |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: GitHub_M
Published:
Updated: 2024-09-17T14:02:51.483Z
Reserved: 2023-09-04T16:31:48.224Z
Link: CVE-2023-41881
Vulnrichment
Updated: 2024-08-02T19:09:49.296Z
NVD
Status : Modified
Published: 2023-10-11T20:15:10.617
Modified: 2024-11-21T08:21:50.647
Link: CVE-2023-41881
Redhat
No data.
OpenCVE Enrichment
No data.