CVE-2022-31604

🗓️ 01 Jul 2022 17:15:21Reported by nvidiaType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 111 Views

NVFLARE, versions < 2.1.2, contains PKI implementation vulnerability allowing Remote Code Execution

Reporter	Title	Published	Views	Family All 13
ATTACKERKB	CVE-2022-31604	1 Jul 202218:15	–	attackerkb
Circl	CVE-2022-31604	1 Jul 202222:40	–	circl
CNNVD	NVIDIA NVFLARE 代码问题漏洞	1 Jul 202200:00	–	cnnvd
Cvelist	CVE-2022-31604	1 Jul 202217:15	–	cvelist
EUVD	EUVD-2022-0166	3 Oct 202520:07	–	euvd
Github Security Blog	Unsafe deserialisation in the PKI implementation scheme of NVFlare	22 Jun 202221:22	–	github
NVD	CVE-2022-31604	1 Jul 202218:15	–	nvd
OSV	GHSA-RCXC-3W2M-MP8H Unsafe deserialisation in the PKI implementation scheme of NVFlare	22 Jun 202221:22	–	osv
OSV	PYSEC-2022-231	1 Jul 202218:15	–	osv
Prion	Deserialization of untrusted data	1 Jul 202218:15	–	prion

NVD

Vulners

Node

nvidia nvflareRange<2.1.2

[
  {
    "product": "NVIDIA FLARE",
    "vendor": "NVIDIA",
    "versions": [
      {
        "status": "affected",
        "version": "All versions prior to 2.1.2"
      }
    ]
  }
]