PT-2023-23089 · Foundry · Foundry Job-Tracker

Publicado 2023-07-10 · Atualizado 2023-07-18 · CVE-2023-30960

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foundry job-tracker versions prior to 4.645.0

Description A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to.

Recommendations For versions prior to 4.645.0, update to version 4.645.0 to resolve the issue.

Correção

Exposure of Resource to Wrong Sphere

IDOR

Enumeração de Fraquezas

CWE-668

CWE-639

Identificadores relacionados

CVE-2023-30960

Produtos afetados

Foundry Job-Tracker

Referências · 5

• https://t.me/cvenotify/54018 · Publicação no Telegram
• https://palantir.safebase.us/?tcuUid=115d9bf4-201f-4cfe-b2fc-219e3a2d945b · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-30960 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-30960 · Aviso do Fabricante
• https://t.me/cibsecurity/66317 · Publicação no Telegram