What is CVE-2023-30946?

CVE-2023-30946 is a low-severity vulnerability in Palantir Com.palantir.issues:issues, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 3.5/10. Published 2023-06-29.

How severe is CVE-2023-30946?

Low severity. CVSS v3 base score is 3.5 out of 10.

Vulnerability in Palantir Com.palantir.issues:issues

CVE-2023-30946

A security defect was identified in Foundry Issues. If a user was added to an issue on a resource that they did not have access to and consequently could not see, they could query Foundry's Notification API and receive metadata about the issue including the RID of the issue, severity, internal UUID of the author, and the user-defined title of the issue.

EPSS: 0.004 (32.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.5 (Low). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N.

Affected products

Weakness classification (CWE)

References

cve-coordination@palantir.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-30946?: CVE-2023-30946 is a low-severity vulnerability in Palantir Com.palantir.issues:issues, classified under Authentication Bypass Using an Alternate Path or Channel. CVSS score: 3.5/10. Published 2023-06-29.
How severe is CVE-2023-30946?: Low severity. CVSS v3 base score is 3.5 out of 10.