Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rp5m-xq4p-5f64

Опубликовано: 06 июл. 2023
Источник: github
Github: Не прошло ревью
CVSS3: 7.6

Описание

Palantir discovered a software bug in a recently released version of Foundry’s Lime2 service, one of the services backing the Ontology. The software bug has been fixed and the fix has been deployed to your hosted Foundry environment. The vulnerability allowed authenticated users within a Foundry organization to potentially bypass discretionary or mandatory access controls under certain circumstances.

Palantir discovered a software bug in a recently released version of Foundry’s Lime2 service, one of the services backing the Ontology. The software bug has been fixed and the fix has been deployed to your hosted Foundry environment. The vulnerability allowed authenticated users within a Foundry organization to potentially bypass discretionary or mandatory access controls under certain circumstances.

EPSS

Процентиль: 16%
0.0005
Низкий

7.6 High

CVSS3

Дефекты

CWE-304
CWE-863

Связанные уязвимости

CVSS3: 7.6
nvd
больше 2 лет назад

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.

EPSS

Процентиль: 16%
0.0005
Низкий

7.6 High

CVSS3

Дефекты

CWE-304
CWE-863