VDB
CVE-2024-51447
CVE-2024-51447
PUBLISHED
CVSS 5.300000190734863 MEDIUM
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.
EPSS 0.47% · 38.9th percentile
Risk Scores
CVSS 3.1
5.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score
0.47%
38.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| siemens | polarion_alm | 2310, 2404, 2404 |
| Siemens | Polarion V2404 | 0, 0 |
| Siemens | Polarion V2310 | 0, 0 |
Timeline
- May 13, 2025 EPSS Score
- May 13, 2025 Coalition ESS Score
- May 13, 2025 CVE Published
- May 13, 2025 CVE Updated
- May 13, 2025 PoC Published
- May 15, 2025 PoC Published
- May 25, 2025 EPSS Score
- Jun 5, 2025 EPSS Score
- Jun 17, 2025 EPSS Score
- Jun 29, 2025 EPSS Score
- Jul 10, 2025 EPSS Score
- Jul 22, 2025 EPSS Score