CVE-2023-30954: Gotham Video Broken Authentication
First published: Wed Nov 15 2023(Updated: )
The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.
Credit: cve-coordination@palantir.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Palantir Video-application-server | <2.206.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-30954?
The severity of CVE-2023-30954 is low.
What is the vulnerability in CVE-2023-30954?
The vulnerability in CVE-2023-30954 is a race condition in the Gotham video-application-server service.
How does CVE-2023-30954 affect Palantir Video-application-server?
CVE-2023-30954 affects Palantir Video-application-server version up to 2.206.1.
What is the CWE of CVE-2023-30954?
The CWE of CVE-2023-30954 is CWE-362 and CWE-285.
Is there a reference for CVE-2023-30954?
Yes, you can find the reference for CVE-2023-30954 [here](https://palantir.safebase.us/?tcuUid=d2366a3e-a92c-476e-8a7a-7db60e4be567).
- collector/mitre-cve
- collector/nvd-api
- vendor/palantir
- product/video-application-server
- canonical/palantir video-application-server