CVE-2022-27888 The Foundry Issues service was found to be logging in a manner that captured session tokens.
The Foundry Issues service logged session tokens, allowing attackers with log access to potentially hijack user accounts.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-27888?
CVE-2022-27888 is a medium-severity vulnerability in Palantir Foundry Issues, published on 26 Apr 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Foundry Issues service versions 2.244.0 to 2.249.0 was found to be logging in a manner that captured sensitive information (session tokens). This issue was fixed in 2.249.1.
Weakness: CWE-532
Which versions are affected by CVE-2022-27888?
It affects 1 product.
Products include Palantir Foundry Issues.
How do I fix CVE-2022-27888?
No fix has been published for CVE-2022-27888 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-27888 being exploited?
There is no known exploitation of CVE-2022-27888 in the wild and no public exploit code.
Other vulnerabilities in Palantir Foundry Issues
Sources
Also known as GHSA-cwq5-9fp6-j489.