CVE-2024-51447CWE-204

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2)

Medium · published May 13, 2025

CVSS v4.0
6.9
EPSS
0%
Percentile
40.8
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N
EPSS
0.00485 · 40.8th percentile
Weakness
CWE-204 · Observable Response Discrepancy
Published
2025-05-13T09:38Z
EPSS history
Timeline
  • 13 MAY 09:38Z
    A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2)
    cvelistv5