Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2023-22834

The contour service was not checking that users had permission to create an analysis for a given dataset

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Palantir

Description

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palantir com.palantir.contour:contour-dispatch

  • * to < 9.642.0affected

References