A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM.
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Siemens |
|
No data.
No data.
Advisories
| Source | ID | Title |
|---|---|---|
 EUVD |
EUVD-2023-55058 | A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The affected product is vulnerable due to weak file and folder permissions in the installation path. An attacker with local access could exploit this vulnerability to escalate privileges to NT AUTHORITY\SYSTEM. |
Fixes
Solution
No solution given by the vendor.
Workaround
No workaround given by the vendor.
References
History
Wed, 07 May 2025 22:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Fri, 18 Oct 2024 17:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Siemens
Siemens polarion Alm |
|
| CPEs | cpe:2.3:a:siemens:polarion_alm:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Siemens
Siemens polarion Alm |
MITRE
Status: PUBLISHED
Assigner: siemens
Published:
Updated: 2025-05-07T21:15:09.457Z
Reserved: 2023-12-05T16:42:20.988Z
Link: CVE-2023-50236
Vulnrichment
Updated: 2024-08-02T22:09:49.946Z
NVD
Status : Modified
Published: 2024-02-13T09:15:46.633
Modified: 2024-11-21T08:36:43.500
Link: CVE-2023-50236
Redhat
No data.
OpenCVE Enrichment
No data.