medium6.5
CVE-2024-33647
A vulnerability has been identified in Polarion ALM (All versions < V2404.0).
Impact
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects.
Affected products
| Product | Affected versions |
|---|---|
| Polarion ALM (All | before 2404.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.