5.3
Medium
CVE-2024-51447 A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2)
Description
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Polarion V2310 | Versions not published | |
| Polarion V2404 2404.2 | earliest → < 2404.2 | 2404.2 |
Other CVEs of Polarion V2310
The 4 CVEs of Polarion V2310 →
CVE-2024-51446
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4)
6.5
Medium
CVE-2024-51445
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4)
6.5
Medium
CVE-2024-51444
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4)
6.5
Medium