PT-2023-23083 · Unknown · Gotham Video-Application-Server

Published 2023-11-15 · Updated 2023-11-22 · CVE-2023-30954

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Gotham video-application-server (affected versions not specified)

Description The issue is related to a race condition in the Gotham video-application-server service. This condition causes the service to fail in applying certain access control lists (acls) to new videos if the source system has not yet initialized.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Race Condition

Weakness Enumeration

CWE-285

CWE-362

Related Identifiers

CVE-2023-30954

Affected Products

Gotham Video-Application-Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2023-30954 · Security Note
• https://palantir.safebase.us/?tcuUid=d2366a3e-a92c-476e-8a7a-7db60e4be567 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30954 · Vendor Advisory