What is CVE-2022-27895?

CVE-2022-27895 is a medium-severity vulnerability in Palantir Foundry Build2, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.2/10. Published 2022-11-15.

How severe is CVE-2022-27895?

Medium severity. CVSS v3 base score is 4.2 out of 10.

Information disclosure in Palantir Foundry Build2

CVE-2022-27895

Information Exposure Through Log Files vulnerability discovered in Foundry when logs were captured using an underlying library known as Build2. This issue was present in versions earlier than 1.785.0. Upgrade to Build2 version 1.785.0 or greater.

EPSS: 0.004 (29.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.2 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N.

Affected products

Palantir Foundry Build2 — versions unspecified
Palantir Foundry_build2

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

cve-coordination@palantir.com (Third Party Advisory)

Frequently asked questions

What is CVE-2022-27895?: CVE-2022-27895 is a medium-severity vulnerability in Palantir Foundry Build2, classified under Insertion of Sensitive Information into Log File. CVSS score: 4.2/10. Published 2022-11-15.
How severe is CVE-2022-27895?: Medium severity. CVSS v3 base score is 4.2 out of 10.