6.5
Medium
CVE-2024-33647 A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
Description
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Polarion ALM 2404.0 | earliest → < 2404.0 | 2404.0 |
Other CVEs of Polarion ALM
The 6 CVEs of Polarion ALM →
CVE-2024-23813
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
7.3
High
CVE-2023-50236
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
7.8
High
CVE-2023-28828
A vulnerability has been identified in Polarion ALM (All versions < V22R2)
5.9
Medium
CVE-2022-46265
A vulnerability has been identified in Polarion ALM (All versions < V2304.0)
5.4
Medium