Vulnerability · Published Nov 14, 2022 · Assigned by Palantir

CVE-2022-27896The Foundry Code-Workbooks service was found to contain an issue leading to information disclosure.

Medium 4.2

In plain English

A medium-severity sensitive data in logs in Foundry Code-Workbooks from Palantir. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).

Severity (CVSS 3.1)4.2Medium

Exploit odds (30 days)0.4%top 65.6% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0.

Affected products (as reported)

Vendor	Product	Versions
Palantir	Foundry Code-Workbooks	4.144 – before unspecifiedunspecified – through 4.460.0

Weakness: CWE-532 · Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N

References

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-08.md