CVE-2023-22836CWE-862
In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes the linter name from the default value, the renamed value may be visible to the rest of the stack’s tenants.
Low · published January 29, 2024
What it is
In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the default value, the renamed value may be visible to the rest of the stack’s tenants.
The record
Technical detail
- CVSS v3.1
- 3.5 · LOW
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/CR:H/IR:H/AR:H
- CVSS v4.0
- Not supplied
- EPSS
- 0.00259 · 16.6th percentile
- Weakness
- CWE-862 · Missing Authorization
- Published
- 2024-01-29T18:50Z
EPSS history
Timeline
29 JAN 18:50Z
In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes the linter name from the default value, the renamed value may be visible to the rest of the stack’s tenants.
cvelistv5