Lucene search

[email protected]CVE-2022-27893

HistoryNov 04, 2022 - 4:15 p.m.

CVE-2022-27893

2022-11-0416:15:14

CWE-532

[email protected]

web.nvd.nist.gov

cve

foundry magritte

osisoft-pi-web-connector

vulnerability

authentication

nvd

4.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.

Affected configurations

NVD

Node

osisoft-pi-web-connector_projectosisoft-pi-web-connectorRange0.15.0–0.44.0foundry_magritte

CPENameOperatorVersion
osisoft-pi-web-connector_project:osisoft-pi-web-connectorosisoft-pi-web-connector project osisoft-pi-web-connectorlt0.44.0

CPE	Name	Operator	Version
osisoft-pi-web-connector_project:osisoft-pi-web-connector	osisoft-pi-web-connector project osisoft-pi-web-connector	lt	0.44.0

CNA Affected

[
  {
    "vendor": "Palantir",
    "product": "Foundry Magritte plugin osisoft-pi-web-connector",
    "versions": [
      {
        "version": "unspecified",
        "lessThan": "0.43.0",
        "status": "affected",
        "versionType": "custom"
      },
      {
        "version": "next of 0.15.0",
        "status": "affected",
        "lessThan": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-03.md

Social References

4.2 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

4.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2022-27893

nvd1 prion1 cvelist1