Vulnerability Description
In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the default value, the renamed value may be visible to the rest of the stack’s tenants.
CVSS Score
LOW
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Guardiansoft | Guardian | < 2.278.0 |
Related Weaknesses (CWE)
References
- https://palantir.safebase.us/?tcuUid=f9bf67ef-be15-4f87-a526-bf6064e8f682Third Party Advisory
- https://palantir.safebase.us/?tcuUid=f9bf67ef-be15-4f87-a526-bf6064e8f682Third Party Advisory
FAQ
What is CVE-2023-22836?
CVE-2023-22836 is a vulnerability with a CVSS score of 3.5 (LOW). In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the default value, the renamed value may be visible to the rest of the stack’s te...
How severe is CVE-2023-22836?
CVE-2023-22836 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-22836?
Check the references section above for vendor advisories and patch information. Affected products include: Guardiansoft Guardian.