← CVE Intelligence

CVE-2024-33647

Siemens / Polarion ALM PUBLISHED

Description (CNA)

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects.

Affected (CNA)

Vendor / productVersions
Siemens / Polarion ALMaffected 0 before V2404.0

CWE

CWE-284

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.