Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable.

PublishedMar 17, 2022, 21:15

Published Bypsirt@nvidia.com

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

nvflare(PyPI)02.0.16N/A

References

https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-jx8f-cpx7-fv47

Weakness Type

CWE-770

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK