SIEMENS-SSA-871717 · Published 2024-05-14 · View on Siemens ProductCERT ↗

SSA-871717 V1.2 (Last Update: 2024-05-14): Multiple Vulnerabilities in Polarion ALM

CVSS N/A MEDIUM

Risk Summary

<p>Polarion ALM is affected by incorrect default path permissions in installation path, and improper authentication in the REST API endpoints of DOORS connector. An attacker could exploit the vulnerabilities for unauthenticated access, or privilege escalation.</p> <p>Siemens has released a new version for Polarion ALM and recommends to update to the latest version.</p>

Remediations

Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Siemens

Affected Products (1)

Siemens · SSA-871717 V1.2 (Last Update: 2024-05-14): Multiple Vulnerabilities in Polarion ALM See advisory

Get alerted to advisories like this

OTWarden monitors CISA, BSI, Siemens, Rockwell and more — and emails you within 2 hours when your vendors are affected.

Start free trial Learn more