CVE-2023-22833CWE-304

Mandatory control bypass in Lime2

High · published June 6, 2023

CVSS v3.1
7.6
EPSS
0%
Percentile
34.0
In the wild
Unconfirmed
What it is

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.

The record
Technical detail
CVSS v3.1
7.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00408 · 34.0th percentile
Weakness
CWE-304 · Missing Critical Step in Authentication
Published
2023-06-06T18:55Z
EPSS history
Timeline
  • 06 JUN 18:55Z
    Mandatory control bypass in Lime2
    cvelistv5