What’s Vulnerable › Vulnerabilities

CVE-2022-27890

• Severity: high (CVSS 7.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-02-16 · updated 2026-06-17
• Weakness: CWE-297

Description

It was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept, read, or modify network communications to and from the affected service. In the case of AtlasDB, the vulnerability was mitigated by other network controls such as two-way TLS when deployed as part of a Palantir platform. Palantir still recommends upgrading to a non-vulnerable version out of an abundance of caution.

Affected products

• Palantir AtlasDB: before 0.730.0 — fixed in 0.730.0

How to fix

Upgrade to a fixed version: Palantir AtlasDB 0.730.0. Check the vendor advisory for mitigations.

References

• https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-15.md
• https://github.com/palantir/security-bulletins/blob/main/PLTRSEC-2022-15.md

Get alerted when CVE-2022-27890 or the next vulnerability affects your stack