CVE-2022-27896mediumCWE-532

CVE-2022-27896: falha de média gravidade em Palantir Foundry Code-Workbooks

The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Foundry Code-Workbooks

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.2epss 0.4%
Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0.
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
Produtos afetados
Palantir · Foundry Code-Workbooks