Lucene search

K
prionPRIOn knowledge basePRION:CVE-2022-27891
HistoryFeb 16, 2023 - 4:15 p.m.

Design/Logic Flaw

2023-02-1616:15:00
PRIOn knowledge base
www.prio-n.com
4
design flaw
logic flaw
unauthenticated endpoint
active usernames
security patch
customer upgrade
nvd

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

Palantir Gotham included an unauthenticated endpoint that listed all active usernames on the stack with an active session. The affected services have been patched and automatically deployed to all Apollo-managed Gotham instances. It is highly recommended that customers upgrade all affected services to the latest version. This issue affects: Palantir Gotham versions prior to 103.30221005.0.

CPENameOperatorVersion
gothamlt3.22.10.4

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

Related for PRION:CVE-2022-27891