CVE-2022-21822

NVIDIA FLARE contains a vulnerability in the admin interface, where an un-authorized attacker can cause Allocation of Resources Without Limits or Throttling, which may lead to cause system unavailable.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@nvidia.com

Published

2022-03-17

Last modified

2024-08-03

Weaknesses

CWE-770

Affected products

• Federated Learning Application Runtime Environment (Nvidia)
• Nvidia Flare (Nvidia)

References

• https://github.com/NVIDIA/NVFlare/security/advisories/GHSA-jx8f-cpx7-fv47