Description
Control Panel provides an API for pre-registering into an enrollment and organization prior to a user's first login. The API for creating users checks that the account requesting a user creation has `edit` on the enrollment-level user directory, but is missing a separate check that the enrollment editor has access (or belongs to) the organization that they are adding a user to.
INFO
Published Date :
2025-12-18T19:32:30.241Z
Last Modified :
2025-12-18T19:48:40.936Z
Source :
Palantir
AFFECTED PRODUCTS
The following products are affected by CVE-2025-64400 vulnerability.
| Vendors | Products |
|---|---|
| Palantir |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2025-64400.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact