Executive brief
vantage6 is a federated learning platform that provides node and server container images for collaborative data analysis. By default, these containers are configured with SSH enabled and allow root login with password authentication, which could allow unauthorized remote access if the SSH service is exposed to an untrusted network. In properly isolated deployments, this poses minimal risk; however, misconfigured deployments could result in complete system compromise.
Technical details
This vulnerability stems from an insecure default SSH configuration in the Docker images for vantage6 node and server containers that permits password-based root login. The root cause is the overly permissive SSH settings intended for debugging purposes. The attack vector is network-based, requiring network connectivity to the SSH port (typically port 22); no authentication is required as the default configuration accepts password authentication for the root user. An attacker with network access to an exposed SSH service could gain root-level access to the container and underlying system. The vulnerability affects all versions prior to 4.2.0; the fix involves removing or restricting SSH configuration in the default container images.
Affected products
- vantage6 vantage6 < 4.2.0
Timeline
- 2024-01-30: disclosed
- 2024-01-30: patched: Patched in version 4.2.0