Description
The Contour Service was not checking that users had permission to create an analysis for a given dataset. This could allow an attacker to clutter up Compass folders with extraneous analyses, that the attacker would otherwise not have permission to create.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palantir | com.palantir.contour:contour-dispatch | < 9.642.0 | 9.642.0 |