CVE-2024-51447 — Siemens / Polarion V2310

CVE-2024-51447

Siemens / Polarion V2310 PUBLISHED

Description (CNA)

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.

Affected (CNA)

Vendor / product	Versions
Siemens / Polarion V2310	affected 0 before *
Siemens / Polarion V2404	affected 0 before V2404.2

CWE

CWE-204

References

https://cert-portal.siemens.com/productcert/html/ssa-162255.html

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.