Skip to content
OpenAdvisories
High · 7.6 CVE-2023-22833 EUVD-2023-26944GHSA-rp5m-xq4p-5f64

Mandatory control bypass in Lime2

Published Jun 6, 2023 · Updated Jan 7, 2025 · Assigned by Palantir

Description

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.

Affected products

VendorProductAffectedFixed
Palantir com.palantir.lime:lime2 2.519.0 – < 2.532.0 2.532.0

References