CVE-2020-25459

CVE-2020-25459 affects WeBank FATE (Federated AI Technology Enabler) versions 0.1–1.4.2, via the function sync_tree in hetero_decision_tree_guest.py, allowing an attacker to read sensitive information during training. Connected advisories corroborate the issue and note patches in affected project...

WeBank Federated AI Technology Enabler 安全漏洞

WeBank Federated AI Technology Enabler is an industrial-grade federated learning framework. A security vulnerability exists in WeBank Federated AI Technology Enabler versions 0.1 through 1.4.2. An attacker exploited the vulnerability to read sensitive information during the training process of...