CVE-2024-33622mediumCWE-306

CVE-2024-33622

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.5epss 0.4%

probabilidad de explotación

0.4%top 64% de las CVE

explotación observada

noninguna fuente lo reporta

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Fsas Technologies Inc. · FUJITSU Business Application ID Link Manager II Fsas Technologies Inc. · FUJITSU Software ID Link Manager Fsas Technologies Inc. · FUJITSU Software TIME CREATOR ID Link Manager Fsas Technologies Inc. · FUJITSU Software TIME CREATOR ID Link Manager SaaS

Referencias

https://jvn.jp/en/jp/JVN65171386/https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html