CVE-2024-23813 HIGH

CVE-2024-23813

Vendor Siemens
Product Polarion ALM
Weakness CWE-287 · Improper authentication
Published February 13, 2024
Last update May 9, 2025
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C

What the vulnerability does

01Description

A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.

Key dates

02Disclosure timeline

February 13, 2024 CVE published
May 9, 2025 Record updated