CVE-2023-22836
In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes the linter name from the default value, the renamed value may be visible to the rest of the stack’s tenants.
- State
- Published
- Severity
- 3.5 Low
- Published
- Jan 29, 2024
- Updated
- Jun 17, 2025
- Reserved
- Jan 6, 2023
Description
In cases where a multi-tenant stack user is operating Foundry’s Linter service, and the user changes a group name from the default value, the renamed value may be visible to the rest of the stack’s tenants.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.5 Low | CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N/CR:H/IR:H/AR:H | Palantir |
Weaknesses
- CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.
Affected Products
| Product | Versions |
|---|---|
com.palantir.skywise:guardianPalantir |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.