Observable Response Discrepancy in Polarion by Siemens

CVE-2024-51447

What is CVE-2024-51447?

A security flaw has been detected in Polarion, where the login mechanism exhibits discrepancies in response for valid versus invalid usernames. This issue permits an unauthorized attacker to ascertain whether a username exists within the system, potentially leading to further attacks. Users of Polarion versions V2310 and V2404 (prior to V2404.2) are particularly advised to review their security measures in light of this vulnerability.

References