Skip to content
OpenAdvisories
Low · 2.7 CVE-2023-30954 EUVD-2023-35292GHSA-pj4x-jr79-qxhv

Gotham Video Broken Authentication

Published Nov 15, 2023 · Updated Aug 29, 2024 · Assigned by Palantir

Description

The Gotham video-application-server service contained a race condition which would cause it to not apply certain acls new videos if the source system had not yet initialized.

Affected products

VendorProductAffectedFixed
Palantir com.palantir.video:video-application-server < 2.206.1 2.206.1

References