Описание
Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.
Уязвимые конфигурации
Конфигурация 1Версия от 2.519.0 (включая) до 2.531.0 (включая)
cpe:2.3:a:palantir:foundry:*:*:*:*:*:*:*:*
EPSS
Процентиль: 16%
0.0005
Низкий
7.6 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-304
CWE-863
Связанные уязвимости
CVSS3: 7.6
github
больше 2 лет назад
Palantir discovered a software bug in a recently released version of Foundry’s Lime2 service, one of the services backing the Ontology. The software bug has been fixed and the fix has been deployed to your hosted Foundry environment. The vulnerability allowed authenticated users within a Foundry organization to potentially bypass discretionary or mandatory access controls under certain circumstances.
EPSS
Процентиль: 16%
0.0005
Низкий
7.6 High
CVSS3
6.5 Medium
CVSS3
Дефекты
CWE-304
CWE-863