Lucene search
HistoryOct 26, 2023 - 12:15 a.m.
CVE-2023-30969
palantir tiles1
vulnerable
api
authentication
issue
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
8.2 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not performing authentication/authorization on all the endpoints.
Affected configurations
Node
palantirtilesRange<4.326.0
Related
prion
prion
Authorization
2023-10-26 00:15:00
cve
cve
CVE-2023-30969
2023-10-26 00:15:10
cvelist
cvelist
CVE-2023-30969 Palantir Tiles missing authentication on API endpoints
2023-10-25 23:16:06
6.5 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
8.2 High
AI Score
Confidence
High
0.0005 Low
EPSS
Percentile
17.0%
Related for NVD:CVE-2023-30969