CVE-2022-27889 Denial of service in Foundry Multipass
Attackers can cause denial of service for authentication and authorization operations in Palantir Foundry Multipass, leading to login failures.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-27889?
CVE-2022-27889 is a medium-severity denial of service vulnerability in Palantir Foundry Multipass, published on 14 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The Multipass service was found to have code paths that could be abused to cause a denial of service for authentication or authorization operations. A malicious attacker could perform an application-level denial of service attack, potentially causing authentication and/or authorization operations to fail for the duration of the attack. This could lead to performance degradation or login failures for customer Palantir Foundry environments. This vulnerability is resolved in Multipass 3.647.0. This issue affects: Palantir Foundry Multipass versions prior to 3.647.0.
Which versions are affected by CVE-2022-27889?
It affects 1 product.
Products include Palantir Foundry Multipass.
How do I fix CVE-2022-27889?
No fix has been published for CVE-2022-27889 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2022-27889 being exploited?
There is no known exploitation of CVE-2022-27889 in the wild and no public exploit code.
Sources
Also known as GHSA-q76q-x9c4-447v.