title: Mandatory control bypass in Lime2
description: Palantir Foundry deployments running Lime2 versions between 2.519.0 and 2.532.0 were vulnerable a bug that allowed authenticated users within a Foundry organization to bypass discretionary or mandatory access controls under certain circumstances.
problem types: The product implements an authentication technique, but it skips a step that weakens the technique.
affected:
{
vendor: Palantir
product: com.palantir.lime:lime2
versions:
versionType: semver, version: 2.519.0, lessThan: 2.532.0, status: affected
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
baseSeverity: HIGH
baseScore: 7.6
]
format: CVSS