1. Home
  2. CVE Database
  3. CVE-2023-22834
LOW · 2.7

CVE-2023-22834

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the ...

Vulnerability Description

The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.

CVSS Score

2.7

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
LOW

Affected Products

VendorProductVersions
PalantirContour< 9.642.0

Related Weaknesses (CWE)

CWE-425CWE-862

References

FAQ

What is CVE-2023-22834?

CVE-2023-22834 is a vulnerability with a CVSS score of 2.7 (LOW). The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the ...

How severe is CVE-2023-22834?

CVE-2023-22834 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-22834?

Check the references section above for vendor advisories and patch information. Affected products include: Palantir Contour.