description: A vulnerability has been identified in Polarion ALM (All versions). The REST API endpoints of doorsconnector of the affected product lacks proper authentication. An unauthenticated attacker could access the endpoints, and potentially execute code.
problem types: CWE-287: Improper Authentication
affected:
{
vendor: Siemens
product: Polarion ALM
versions:
status: affected, version: All versions
defaultStatus: unknown
}
metrics:
cvssV3_1: [
version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C
baseScore: 7.3
baseSeverity: HIGH
]