CVE-2023-30960
Medium
Description
A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
SeverityMedium
CVSS4.3
Exploit probability—
ProductPalantir Foundry Job-tracker
PublishedJul 10, 2023
First seenJul 10, 2023
How to fix
Update
- palantir foundry_job-tracker4.645.0 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| palantir foundry_job-tracker | v < 4.645.0 | 4.645.0 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.