Unauthenticated Access to REST API Endpoints in Polarion ALM

CVE-2024-23813

What is CVE-2024-23813?

A significant vulnerability exists in Polarion ALM, where the REST API endpoints of the doorsconnector are susceptible to improper authentication controls. This lack of security measures allows unauthenticated attackers to gain access to the REST API, creating a pathway for potential code execution and unauthorized actions within the application. It is crucial for organizations using Polarion ALM to implement robust security protocols and update to the latest version to mitigate associated risks.

References