CVE-2022-27893 — The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication…

CVE-2022-27893

The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests. PUBLISHED

Description (CNA)

The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.

Affected (CNA)

Vendor / product	Versions
Palantir / Foundry Magritte plugin osisoft-pi-web-connector	affected unspecified before 0.43.0; affected next of 0.15.0 before unspecified

CWE

CWE-532

References

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-03.md

ADP enrichment

CVE

No English description supplied.

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-03.md

CISA-ADP

No English description supplied.

No references supplied.