CVE-2022-27889

The Foundry Multipass service contains code paths that could be abused to cause a denial of service for authentication and authorization operations.

State: Published
Severity: 5.3 Medium
Published: Jun 14, 2022
Updated: Sep 16, 2024
Reserved: Mar 25, 2022

Read the record on cve.org

Description

The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authentication and/or authorization operations to fail for the duration of the attack. This could lead to performance degradation or login failures for customer Palantir Foundry environments. This vulnerability is resolved in Multipass 3.647.0. This issue affects: Palantir Foundry Multipass versions prior to 3.647.0.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L	Palantir

Weaknesses

CWE-400 Uncontrolled Resource Consumption

Affected Products

Product	Versions
Foundry MultipassPalantir	before 3.647.0Affected

References

https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-02.md

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.