In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes the linter name from the default value, the renamed value may be visible to the rest of the stack’s tenants.

CVE-2023-22836

What is CVE-2023-22836?

This vulnerability occurs in the Linter service of Palantir Foundry within multi-tenant environments. When a user modifies the default group name, the new name may inadvertently become visible to other tenants utilizing the same stack. This situation could lead to unintended data exposure, raising concerns about tenant isolation and data privacy within shared environments.

References