PT-2024-33555 · Foundry · Foundry

Published 2024-12-02 · Updated 2024-12-02 · CVE-2024-49581

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Foundry (affected versions not specified)

Description A software bug could allow users without permission to view restricted objects directly through the Object Explorer under specific circumstances. This issue did not make data available across organizational boundaries, nor did it allow unauthenticated users to view or access data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2024-49581

Affected Products

Foundry

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2024-49581 · Security Note
• https://palantir.safebase.us/?tcuUid=b60db1ee-4b1a-475d-848e-c5a670a0da16 · Note
• https://t.me/cvedetector/11823 · Telegram Post