Vulnerability · Published Feb 16, 2023 · Assigned by Palantir
CVE-2022-48307
Medium 6.3
In plain English
A medium-severity security flaw in Foundry Magritte from Palantir. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 11% of all known vulnerabilities).
Official description
It was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept, read, or modify network communications to and from the affected service. In the case of a successful man in the middle attack on magritte-ftp, an attacker would be able to read and modify network traffic such as authentication tokens or raw data entering a Palantir Foundry stack.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palantir | Foundry Magritte | unspecified – before 9.466.0 |
Weakness: CWE-297 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:L/A:N