CVE-2023-30954
Low
Description
The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.
SeverityLow
CVSS2.7
Exploit probability—
ProductPalantir Video-application-server
PublishedNov 15, 2023
First seenNov 15, 2023
Weakness typeCWE-285CWE-285
How to fix
Update
- palantir video-application-server2.206.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| palantir video-application-server | v < 2.206.1 | 2.206.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.