CVE-2024-22043

Summary

CVE-2024-23813 is a newly discovered vulnerability affecting Polarion ALM versions below V2404.0. The issue lies with the doorsconnector REST API endpoints, which lack adequate authentication. As a result, an unauthenticated attacker can gain access to these endpoints and potentially execute malicious code. This weakness poses a significant risk, emphasizing the importance of promptly upgrading to a secure version of Polarion ALM.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.