7.3
High
CVE-2024-23813 A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
Description
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Polarion ALM 2404.0 | earliest → < 2404.0 | 2404.0 |
Other CVEs of Polarion ALM
The 6 CVEs of Polarion ALM →
CVE-2024-33647
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
6.5
Medium
CVE-2023-50236
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
7.8
High
CVE-2023-28828
A vulnerability has been identified in Polarion ALM (All versions < V22R2)
5.9
Medium
CVE-2022-46265
A vulnerability has been identified in Polarion ALM (All versions < V2304.0)
5.4
Medium