{"data":{"id":"9ef99221-b4f3-4ca3-8738-8f88912d44ea","title":"CVE-2020-25459: An issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology…","summary":"CVE-2020-25459 affects the sync_tree function in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology Enabler) versions 0.1 through 1.4.2. The flaw allows attackers to read sensitive information during the training process of machine learning joint modeling. The weakness is classified as CWE-668, Exposure of Resource to Wrong Sphere.","solution":"The source references a patch in the FATE repository commit 6feccf6d752184a6f9365d56a76fe627983e7139, but does not describe the fix itself.","labels":["security","privacy"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2020-25459","publishedAt":"2022-06-16T21:15:07.713Z","cveId":"CVE-2020-25459","cweIds":["CWE-668"],"cvssScore":"7.5","cvssSeverity":"high","severity":"high","attackType":["data_extraction"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["WeBank FATE (Federated AI Technology Enabler)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"WeBank FATE sync_tree exposes sensitive data during joint modeling training","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.01029,"epssCheckedAt":"2026-11-04T12:08:34.749Z","kevDateAdded":null,"advisoryAliases":["GHSA-72c2-p2mr-mqr3"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-10-29T06:10:01.256Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality"],"aiComponentTargeted":"framework","llmSpecific":false,"classifierConfidence":0.9,"researchCategory":null,"atlasIds":null,"fixes":[]}}