CVE-2023-22834 — The contour service was not checking that users had permission to create an analysis for a given dataset

CVE-2023-22834

The contour service was not checking that users had permission to create an analysis for a given dataset PUBLISHED

Description (CNA)

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.

Affected (CNA)

Vendor / product	Versions
Palantir / com.palantir.contour:contour-dispatch	affected * before 9.642.0

CWE

CWE-425

References

https://palantir.safebase.us/?tcuUid=14874400-e9c9-4ac4-a8a6-9f4c48a56ff8

ADP enrichment

CVE

No English description supplied.

https://palantir.safebase.us/?tcuUid=14874400-e9c9-4ac4-a8a6-9f4c48a56ff8

CISA-ADP

No English description supplied.

No references supplied.