CVE-2022-31604

Source

https://nvd.nist.gov/vuln/detail/CVE-2022-31604

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-31604.json

Aliases

• GHSA-rcxc-3w2m-mp8h
• PYSEC-2022-231

Published

2022-07-01T18:15:08Z

Modified

2023-11-29T09:45:59.311218Z

Details

NVFLARE, versions prior to 2.1.2, contains a vulnerability in its PKI implementation module, where The CA credentials are transported via pickle and no safe deserialization. The deserialization of Untrusted Data may allow an unprivileged network attacker to cause Remote Code Execution, Denial Of Service, and Impact to both Confidentiality and Integrity.

References

• https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-rcxc-3w2m-mp8h