Headline
CVE-2020-25459: remove sensitive info of guest sending to host · FederatedAI/FATE@6feccf6
An issue was discovered in function sync_tree in hetero_decision_tree_guest.py in WeBank FATE (Federated AI Technology Enabler) 0.1 through 1.4.2 allows attackers to read sensitive information during the training process of machine learning joint modeling.
@@ -529,10 +529,23 @@ def redispatch_node(self, dep=-1, max_depth_reach=False):
unleaf_state_nodeid1) == 2 else unleaf_state_nodeid2)
self.node_dispatch = self.node_dispatch.union(dispatch_guest_result)
def remove_sensitive_info(self):
“"”
host is not allowed to get weights/g/h
“"”
new_tree_ = copy.deepcopy(self.tree_)
for node in new_tree_:
node.weight = None
node.sum_grad = None
node.sum_hess = None
return new_tree_
def sync_tree(self):
LOGGER.info(“sync tree to host”)
self.transfer_inst.tree.remote(self.tree_,
tree_nodes = self.remove_sensitive_info()
self.transfer_inst.tree.remote(tree_nodes,
role=consts.HOST,
idx=-1)
“"”