6.5
Moyenne
CVE-2024-33647 A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
Description
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Polarion ALM 2404.0 | premières → < 2404.0 | 2404.0 |
Autres CVE de Polarion ALM
Les 6 CVE de Polarion ALM →
CVE-2024-23813
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
7.3
Élevée
CVE-2023-50236
A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
7.8
Élevée
CVE-2023-28828
A vulnerability has been identified in Polarion ALM (All versions < V22R2)
5.9
Moyenne
CVE-2022-46265
A vulnerability has been identified in Polarion ALM (All versions < V2304.0)
5.4
Moyenne