CVE-2022-39228

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists. This is an attempt to prevent bots from obtaining usernames. However, if a wrong password is entered a number of times, the user account is blocked temporarily. This issue has been fixed in version 3.8.0.

• CWE-203
• CWE-204
• CWE-203

• https://github.com/vantage6/vantage6/commit/ab4381c35d24add06f75d5a8a284321f7a340bd2Patch
• https://github.com/vantage6/vantage6/issues/59Issue Tracking, Vendor Advisory
• https://github.com/vantage6/vantage6/pull/281Patch, Vendor Advisory
• https://github.com/vantage6/vantage6/security/advisories/GHSA-36gx-9q6h-g429Vendor Advisory
• https://github.com/vantage6/vantage6/commit/ab4381c35d24add06f75d5a8a284321f7a340bd2Patch
• https://github.com/vantage6/vantage6/issues/59Issue Tracking, Vendor Advisory
• https://github.com/vantage6/vantage6/pull/281Patch, Vendor Advisory
• https://github.com/vantage6/vantage6/security/advisories/GHSA-36gx-9q6h-g429Vendor Advisory

Published

Mar 1, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-39221McWebserver mod runs a simple HTTP server alongside the Mine…7.5
• CVE-2022-39222Dex is an identity service that uses OpenID Connect to drive…6.5
• CVE-2022-39224Arr-pm is an RPM reader/writer library written in Ruby. Vers…7.8
• CVE-2022-39225Parse Server is an open source backend that can be deployed …3.1
• CVE-2022-39226Discourse is an open source discussion platform. In versions…4.3
• CVE-2022-39227python-jwt is a module for generating and verifying JSON Web…9.1
• CVE-2022-39229Grafana is an open source data visualization platform for me…4.3
• CVE-2022-3923The ActiveCampaign for WooCommerce WordPress plugin before 1…4.3
• CVE-2022-39230fhir-works-on-aws-authz-smart is an implementation of the au…6.5
• CVE-2022-39231Parse Server is an open source backend that can be deployed …3.7
• CVE-2022-39232Discourse is an open source discussion platform. Starting wi…4.3
• CVE-2022-39233Tuleap is a Free & Open Source Suite to improve management o…5.4