cve/2023/CVE-2023-22833.md

### [CVE-2023-22833](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-22833)
![](https://img.shields.io/static/v1?label=Product&message=com.palantir.lime%3Alime2&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=2.519.0%3C%202.532.0%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=The%20product%20implements%20an%20authentication%20technique%2C%20but%20it%20skips%20a%20step%20that%20weakens%20the%20technique.&color=brighgreen)

### Description

Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.

### POC

#### Reference
- https://palantir.safebase.us/?tcuUid=7f1fd834-805d-4679-85d0-9d779fa064ae

#### Github
No PoCs found on GitHub currently.