PT-2023-23089 · Foundry · Foundry Job-Tracker

Published 2023-07-10 · Updated 2023-07-18 · CVE-2023-30960

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foundry job-tracker versions prior to 4.645.0

Description A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to.

Recommendations For versions prior to 4.645.0, update to version 4.645.0 to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

IDOR

Weakness Enumeration

CWE-668

CWE-639

Related Identifiers

CVE-2023-30960

Affected Products

Foundry Job-Tracker

References · 5

• https://palantir.safebase.us/?tcuUid=115d9bf4-201f-4cfe-b2fc-219e3a2d945b · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30960 · Security Note
• https://osv.dev/vulnerability/CVE-2023-30960 · Vendor Advisory
• https://t.me/cvenotify/54018 · Telegram Post
• https://t.me/cibsecurity/66317 · Telegram Post