CVE-2023-30946: Issues notification metadata lacks authorization
First published: Thu Jun 29 2023(Updated: )
A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have access to and consequently could not see, they could query Foundry's Notification API and receive metadata about the issue including the RID of the issue, severity, internal UUID of the author, and the user-defined title of the issue.
Credit: cve-coordination@palantir.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Palantir Foundry | <2.497.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is CVE-2023-30946?
CVE-2023-30946 is a security defect identified in Foundry Issues which allows unauthorized users to query Foundry's Notification API and receive metadata about an issue they do not have access to.
How does CVE-2023-30946 affect Palantir Foundry Issues?
CVE-2023-30946 affects Palantir Foundry Issues by allowing users to access information about issues they do not have permission to see.
What is the severity of CVE-2023-30946?
The severity of CVE-2023-30946 is medium with a severity value of 4.3.
How can I fix CVE-2023-30946 in Palantir Foundry Issues?
To fix CVE-2023-30946 in Palantir Foundry Issues, it is recommended to apply the latest updates and patches provided by Palantir.
Where can I find more information about CVE-2023-30946?
More information about CVE-2023-30946 can be found at the following URL: https://palantir.safebase.us/?tcuUid=4cf0b6e6-564a-467b-83ae-36fec3a491c3
- agent/type
- agent/softwarecombine
- agent/author
- agent/references
- agent/weakness
- agent/title
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/palantir
- canonical/palantir foundry