Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HPalantir Clips2
APPPalantir< 0.111.2Palantir Video Clip Distributor
APPPalantir< 0.24.10Palantir Video History Service
APPPalantir< 2.210.3
Related vulnerabilities
Gotham Orbital-Simulator service prior to 0.692.0 was found to be vulnerable to a Path traversal issue allowin...
The Palantir Tiles1 service was found to be vulnerable to an API wide issue where the service was not perform...
A security defect was identified that enabled a user of Foundry Issues to perform a Denial of Service attack b...
Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that all...
Gotham Table service and Forward App were found to be vulnerable to a Path traversal issue allowing an authent...