Siemens: >> Polarion Alm >> 2304.0 Security Vulnerabilities
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.
CVSS Score
7.3
EPSS Score
0.001
Published
2024-02-13
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM.
CVSS Score
7.8
EPSS Score
0.0
Published
2024-02-13