CVE-2022-27893
Assigner: Palantir
Published: 2022-11-04T00:00:00
State: PUBLISHED
title: The Foundry Magritte plugin osisoft-pi-web-connector was found to be logging in a manner that captured authentication requests.
datePublic: 2022-11-04T00:00:00
descriptions: value: The Foundry Magritte plugin osisoft-pi-web-connector versions 0.15.0 - 0.43.0 was found to be logging in a manner that captured authentication requests. This vulnerability is resolved in osisoft-pi-web-connector version 0.44.0.
affected: vendor: Palantir
product: Foundry Magritte plugin osisoft-pi-web-connector
versions: version: unspecified
lessThan: 0.43.0
status: affected
versionType: custom
version: next of 0.15.0
status: affected
lessThan: unspecified
versionType: custom
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: NONE
availabilityImpact: NONE
baseScore: 4.2
baseSeverity: MEDIUM
problemTypes: descriptions: type: CWE
description: CWE-532 Information Exposure Through Log Files
cweId: CWE-532
x_generator: engine: Vulnogram 0.0.9
source: defect: PLTRSEC-2022-03
discovery: INTERNAL