CVE-2023-30945 CRITICAL

CVE-2023-30945: CVE-2023-30945

Vendor Palantir
Product com.palantir.gotham:clips2
Weakness CWE-287 · Improper authentication
Published June 26, 2023
Last update December 5, 2024

CVSS base score

9.8/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/CR:M

What the vulnerability does

01Description

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vulnerable to an unauthenticated arbitrary file read/write vulnerability due to missing input validation on filenames. A malicious attacker could read sensitive files from the filesystem or write/delete arbitrary files on the filesystem as well.

Key dates

02Disclosure timeline

June 26, 2023 CVE published
December 5, 2024 Record updated