medium4.3
CVE-2023-30960
A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to.
Impact
A security defect was discovered in Foundry job-tracker that enabled users to query metadata related to builds on resources they did not have access to. This defect was resolved with the release of job-tracker 4.645.0. The service was rolled out to all affected Foundry instances. No further intervention is required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Palantir | Foundry Job-Tracker | before 4.645.0 |