CVE-2022-27896
Medium
Description
Information Exposure Through Log Files vulnerability discovered in Foundry Code-Workbooks where the endpoint backing that console was generating service log records of any Python code being run. These service logs included the Foundry token that represents the Code-Workbooks Python console. Upgrade to Code-Workbooks version 4.461.0. This issue affects Palantir Foundry Code-Workbooks version 4.144 to version 4.460.0 and is resolved in 4.461.0.
SeverityMedium
CVSS4.2
Exploit probability—
ProductPalantir Foundry Code-workbooks
PublishedNov 14, 2022
First seenNov 14, 2022
Weakness typeCWE-532CWE-532
How to fix
Update
- palantir foundry_code-workbooks4.461.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| palantir foundry_code-workbooks | 4.144.0 ≤ v < 4.461.0 | 4.461.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.