CVE-2024-21671

Summary

CVE-2024-21671 is a vulnerability affecting the vantage6 technology, which supports privacy enhancing technologies such as Federated Learning (FL) and Multi-Party Computation (MPC). An issue was discovered, allowing attackers to infer usernames based on response times of login requests. This vulnerability poses a risk for credential attacks. Users are advised to update to version 4.2.0 to mitigate this issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.