Palantir - Security Bulletin - CVE-2024-49581 - Palantir’s External Artifacts service (versions 105.110.1 through 105.115.0)

Created on 2025-02-18 21:41 and updated on 2025-02-18 21:41.

Description

Restricted Views backed objects (OSV1) could be bypassed under specific circumstances due to a software bug, this could have allowed users that didn't have permission to see such objects to view them via Object Explorer directly. The affected service have been patched and automatically deployed to all Apollo-managed Foundry instances.

Associated vulnerability

CVE-2024-49587

Meta

[
  {
    "ref": [
      "https://palantir.safebase.us/?tcuUid=b60db1ee-4b1a-475d-848e-c5a670a0da16"
    ]
  }
]

Author

Cédric Bonhomme