CVE-2022-27889

Katalog CVE

CVSS 9.1 · Critical EPSS 0,97%

Kerentanan Uncontrolled Resource Consumption pada palantir foundry multipass. Skor CVSS 3.1 9.1 (Critical) menurut NVD.

Deskripsi (NVD)

The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authentication and/or authorization operations to fail for the duration of the attack. This could lead to performance degradation or login failures for customer Palantir Foundry environments. This vulnerability is resolved in Multipass 3.647.0. This issue affects: Palantir Foundry Multipass versions prior to 3.647.0.

Rincian

Terbit di NVD

14 Juni 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

9.1 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-913: Improper Control of Dynamically-Managed Code Resources

EPSS (30 hari)

0,97% peluang dieksploitasi; lebih tinggi dari 60,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-02.md advisory pihak ketiga