Detections
Analytics
SCA: security update for vantage6 (GHSA-99r4-cjp4-3hmx)
low Tenable Self-Hosted Container Security Plugin ID 413179
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- vantage6 is an open-source infrastructure for privacy preserving analysis. Collaboration administrators
can add extra organizations to their collaboration that can extend their influence. For example,
organizations that they include can then create new users for which they know the passwords, and use that
to read task results of other collaborations that that organization is involved in. This is only
relatively trusted users - with access to manage a collaboration - are able to do this, which reduces the
impact. This vulnerability was patched in version 4.5.0rc3. (CVE-2024-32969)
See Also
Plugin Details
Severity: Low
ID: 413179
Version: Revision 1.6
Type: Local
Family: SCA Checks
Published: 1/23/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 1.2
Percentile: 0.01
Vendor
Vendor Severity: Low
CVSS v2
Risk Factor: Low
Base Score: 3.3
Temporal Score: 2.4
Vector: CVSS2#AV:N/AC:L/Au:M/C:P/I:N/A:N
CVSS Score Source: CVE-2024-32969
CVSS v3
Risk Factor: Low
Base Score: 2.7
Temporal Score: 2.4
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 5/22/2024
Vulnerability Publication Date: 5/22/2024
Reference Information
CVE: CVE-2024-32969
cwe: CWE-284