CVE-2024-51444

A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user input for database read queries. This could allow an authenticated remote attacker to conduct an SQL injection attack that bypasses authorization controls and allows to download any data from the application's database.

CVSS v3 6.5 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://cert-portal.siemens.com/productcert/html/ssa-162255.html	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:siemens:polarion_alm::::::::
	cpe:2.3:a:siemens:polarion_alm:2310.0:::::::*

History

23 Sep 2025, 15:38

Type	Values Removed	Values Added
CPE		cpe:2.3:a:siemens:polarion_alm:2310.0:::::::* cpe:2.3:a:siemens:polarion_alm::::::::
First Time		Siemens polarion Alm Siemens
Summary		(es) Se ha identificado una vulnerabilidad en Polarion V2310 (todas las versiones) y Polarion V2404 (todas las versiones anteriores a V2404.4). La aplicación no valida adecuadamente la entrada del usuario para las consultas de lectura de la base de datos. Esto podría permitir que un atacante remoto autenticado realice un ataque de inyección SQL que eluda los controles de autorización y permita descargar cualquier dato de la base de datos de la aplicación.
References	~~() https://cert-portal.siemens.com/productcert/html/ssa-162255.html -~~	() https://cert-portal.siemens.com/productcert/html/ssa-162255.html - Vendor Advisory

13 May 2025, 10:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2025-05-13 10:15

Updated : 2025-09-23 15:38

NVD link : CVE-2024-51444

Mitre link : CVE-2024-51444

CVE.ORG link : CVE-2024-51444

JSON object : View

Products Affected

siemens

polarion_alm

CWE

CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

{"id": "CVE-2024-51444", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "productcert@siemens.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "productcert@siemens.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 7.1, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "LOW", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "NONE", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "published": "2025-05-13T10:15:21.340", "references": [{"url": "https://cert-portal.siemens.com/productcert/html/ssa-162255.html", "tags": ["Vendor Advisory"], "source": "productcert@siemens.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "productcert@siemens.com", "description": [{"lang": "en", "value": "CWE-89"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.4). The application insufficiently validates user input for database read queries. This could allow an authenticated remote attacker to conduct an SQL injection attack that bypasses authorization controls and allows to download any data from the application's database."}, {"lang": "es", "value": "Se ha identificado una vulnerabilidad en Polarion V2310 (todas las versiones) y Polarion V2404 (todas las versiones anteriores a V2404.4). La aplicaci\u00f3n no valida adecuadamente la entrada del usuario para las consultas de lectura de la base de datos. Esto podr\u00eda permitir que un atacante remoto autenticado realice un ataque de inyecci\u00f3n SQL que eluda los controles de autorizaci\u00f3n y permita descargar cualquier dato de la base de datos de la aplicaci\u00f3n."}], "lastModified": "2025-09-23T15:38:34.867", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:siemens:polarion_alm:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E432D0F7-0E9B-46C7-9A07-CB4DC920C8AB", "versionEndExcluding": "2404.4", "versionStartIncluding": "2404.0"}, {"criteria": "cpe:2.3:a:siemens:polarion_alm:2310.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9B380DBD-1890-4CDB-8EB7-0BB81219E904"}], "operator": "OR"}]}], "sourceIdentifier": "productcert@siemens.com"}