vantage6-node (3.8.3), vantage6-server (3.8.3) potentially affected by CVE-2024-21653 via vantage6 (3.8.3)

vantage6 PYPI version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.3 - vantage6-server 3.8.3 Source cves: CVE-2024-21653 Source advisory: OSV:PYSEC-2026-2003...

vantage6-node (3.4.0a6), vantage6-server (3.4.0a6) potentially affected by CVE-2024-21653 via vantage6 (3.4.0a6)

vantage6 PYPI version 3.4.0a6 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.0a6 - vantage6-server 3.4.0a6 Source cves: CVE-2024-21653 Source advisory: OSV:PYSEC-2026-2003...

vantage6-node (3.5.0rc2), vantage6-server (3.5.0rc2) potentially affected by CVE-2024-21653 via vantage6 (3.5.0rc2)

vantage6 PYPI version 3.5.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.5.0rc2 - vantage6-server 3.5.0rc2 Source cves: CVE-2024-21653 Source advisory: OSV:PYSEC-2026-2003...

vantage6-node (3.8.8rc3), vantage6-server (3.8.8rc3) potentially affected by CVE-2024-21653 via vantage6 (3.8.8rc3)

vantage6 PYPI version 3.8.8rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.8rc3 - vantage6-server 3.8.8rc3 Source cves: CVE-2024-21653 Source advisory: OSV:PYSEC-2026-2003...

vantage6-node (3.11.0rc1), vantage6-server (3.11.0rc1) potentially affected by CVE-2024-21653 via vantage6 (3.11.0rc1)

vantage6 PYPI version 3.11.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.11.0rc1 - vantage6-server 3.11.0rc1 Source cves: CVE-2024-21653 Source advisory: OSV:PYSEC-2026-2003...

CVE-2024-21653

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not expose...

vantage6-node (3.6.1rc3), vantage6-server (3.6.1rc3) potentially affected by CVE-2024-21653 via vantage6 (3.6.1rc3)

vantage6 PYPI version 3.6.1rc3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.6.1rc3 - vantage6-server 3.6.1rc3 Source cves: CVE-2024-21653 Source advisory: OSV:GHSA-2WGC-48G2-CJ5W...

vantage6-node (3.8.3), vantage6-server (3.8.3) potentially affected by CVE-2024-21653 via vantage6 (3.8.3)

vantage6 PYPI version 3.8.3 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.8.3 - vantage6-server 3.8.3 Source cves: CVE-2024-21653 Source advisory: OSV:GHSA-2WGC-48G2-CJ5W...

vantage6-node (3.4.1a0), vantage6-server (3.4.1a0) potentially affected by CVE-2024-21653 via vantage6 (3.4.1a0)

vantage6 PYPI version 3.4.1a0 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.4.1a0 - vantage6-server 3.4.1a0 Source cves: CVE-2024-21653 Source advisory: OSV:GHSA-2WGC-48G2-CJ5W...

vantage6-node (3.3.7), vantage6-server (3.3.7) potentially affected by CVE-2024-21653 via vantage6 (3.3.7)

vantage6 PYPI version 3.3.7 is affected by a known vulnerability. The following packages have a transitive dependency on vantage6 and may be impacted: - vantage6-node 3.3.7 - vantage6-server 3.3.7 Source cves: CVE-2024-21653 Source advisory: OSV:GHSA-2WGC-48G2-CJ5W...

CVE-2024-21653 vantage6 insecure SSH configuration for node and server containers

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not expose...

CVE-2024-21653 vantage6 insecure SSH configuration for node and server containers

The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated Learning FL and Multi-Party Computation MPC. Nodes and servers get a ssh config by default that permits root login with password authentication. In a proper deployment, the SSH service is not expose...

CVE-2024-21653

The CVE-2024-21653 entry concerns the vantage6 architecture where node/server containers expose SSH with root login and password authentication by default. The root-cause is an insecure default SSH configuration rather than a flaw in core logic, and the described mitigation is to remove the SSH p...