CVE-2024-23813CWE-287

A vulnerability has been identified in Polarion ALM (All versions < V2404.0)

High · published February 13, 2024

CVSS v3.1
7.3
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
CVSS v4.0
Not supplied
EPSS
0.00589 · 47.4th percentile
Weakness
CWE-287 · Improper Authentication
Published
2024-02-13T09:00Z
EPSS history
Timeline
  • 13 FEB 09:00Z
    A vulnerability has been identified in Polarion ALM (All versions < V2404.0)
    cvelistv5