Description
A vulnerability has been identified in Polarion ALM (All versions < V2404.0). The Apache Lucene based query engine in the affected application lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects.
Problem types
CWE-284: Improper Access Control
Product status
Any version before V2404.0
References
cert-portal.siemens.com/productcert/html/ssa-925850.html
