Description
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fsas Technologies | FUJITSU Business Application ID Link Manager II | V1.8 and earlier | — |
| Fsas Technologies | FUJITSU Software ID Link Manager | V2.0 | — |
| Fsas Technologies | FUJITSU Software TIME CREATOR ID Link Manager | V2.3.0, V2.3.1, V2.4, V2.5, V2.6, and V2.7, V3.0, V3.0.2, V3.0.2.1, and V3.0.3 | — |
| Fsas Technologies | FUJITSU Software TIME CREATOR ID Link Manager SaaS | Versions before the maintenance on June 16, 2024 | — |