CVE-2024-21653

Summary

CVE-2024-21653 is a vulnerability affecting the vantage6 technology used for managing and deploying privacy enhancing technologies like Federated Learning and Multi-Party Computation. The issue lies in the default SSH configuration that permits root login with password authentication. Though the SSH service is not supposed to be exposed, not all deployments adhere to this standard. To mitigate the risk, it is recommended to remove the SSH section from the Dockerfile and rebuild the image. The vulnerability is addressed in version 4.2.0 of the vantage6 technology.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.