Detections
Analytics
SCA: security update for vantage6 (GHSA-2wgc-48g2-cj5w)
critical Tenable Cloud Security Plugin ID 409133
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- The vantage6 technology enables to manage and deploy privacy enhancing technologies like Federated
Learning (FL) and Multi-Party Computation (MPC). Nodes and servers get a ssh config by default that
permits root login with password authentication. In a proper deployment, the SSH service is not exposed so
there is no risk, but not all deployments are ideal. The default should therefore be less permissive. The
vulnerability can be mitigated by removing the ssh part from the docker file and rebuilding the docker
image. Version 4.2.0 patches the vulnerability. (CVE-2024-21653)
See Also
Plugin Details
Severity: Critical
ID: 409133
Version: Revision 1.11
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.58
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2024-21653
CVSS v3
Risk Factor: Critical
Base Score: 9.8
Temporal Score: 8.5
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 1/30/2024
Vulnerability Publication Date: 1/30/2024
Reference Information
CVE: CVE-2024-21653
cwe: CWE-284