Mandatory control bypass in Lime2
CVE-2023-22833

6.5MEDIUM

Key Information:

Vendor

Palantir

Status
com.palantir.lime:lime2
Vendor
CVE Published:
6 June 2023

What is CVE-2023-22833?

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.

Affected Version(s)

com.palantir.lime:lime2 2.519.0 < 2.532.0

References

https://palantir.safebase.us/?tcuUid=7f1fd834-805d-4679-8...

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.