Authentication bypass in Aries due to misconfiguration

A vulnerability in Palantir's Aries service allowed unauthenticated access to log viewing and management functionality on Apollo instances using default configuration. The defect resulted in both authentication and authorization checks being bypassed, potentially allowing any network-accessible client to view system logs and perform operations without valid credentials. No evidence of exploitation was identified during the vulnerability window.

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

使用基本弱点进行的认证绕过

Palantir Aries 安全漏洞

Palantir Aries是美国Palantir公司的一个软件分发和管理系统。 Palantir Aries存在安全漏洞，该漏洞源于身份验证和授权检查被绕过，可能导致未经身份验证的客户端查看系统日志和执行操作。

N/A

N/A