CVE-2022-27895 — A component in Foundry logging was found to be capturing sensitive information in logs.

CVE-2022-27895

A component in Foundry logging was found to be capturing sensitive information in logs. PUBLISHED

Description (CNA)

Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater.

Affected (CNA)

Vendor / product	Versions
Palantir / Foundry Build2	affected unspecified before 1.785.0

CWE

CWE-532

References

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-06.md

ADP enrichment

CVE

No English description supplied.

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-06.md

CISA-ADP

No English description supplied.

No references supplied.