Palantir vulnerabilities
47 CVEs and advisories name Palantir as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-22834The contour service was not checking that users had permission to create an analysis for a given dataset
- CVE-2023-30945CVE-2023-30945
- CVE-2023-22833Mandatory control bypass in Lime2
- CVE-2023-30948Retrieval of Attachments to Comments lacks Authorization
- CVE-2022-48308It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory
- CVE-2022-48307It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactor
- CVE-2022-48306Gotham Chat IRC help does not validate hostnames in TLS certificates
- CVE-2022-27897Palantir Gotham included an endpoint that would log arbitrary sized zip files.
- CVE-2022-27892Palantir Gotham included an endpoint that would log arbitrary sized payloads.
- CVE-2022-27891Palantir Gotham included an unauthenticated endpoint that listed all active usernames in the platform with an active session.
- CVE-2022-27890It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory
- CVE-2022-27895A component in Foundry logging was found to be capturing sensitive information in logs.
- CVE-2022-27896The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.
- CVE-2022-27894The Foundry Blobster service was found to have a cross-site scripting (XSS) vulnerability.
- CVE-2022-27893The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.
- CVE-2022-27889The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations.
- CVE-2022-27888The Foundry Issues service was found to be logging in a manner that captured session tokens.