A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects.
References
Configurations
No configuration.
History
27 Aug 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE |
04 Feb 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-862 |
Information
Published : 2024-05-14 16:17
Updated : 2025-08-27 22:15
NVD link : CVE-2024-33647
Mitre link : CVE-2024-33647
CVE.ORG link : CVE-2024-33647
JSON object : View
Products Affected
No product.
CWE
CWE-284
Improper Access Control