Skip to content
OpenAdvisories
Medium · 6.3 CVE-2024-34024 EUVD-2024-34595GHSA-prj9-gvpq-vj8x

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an u…

Published Jun 18, 2024 · Updated Nov 15, 2024 · Assigned by jpcert

Description

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.

Affected products

VendorProductAffectedFixed
Fsas Technologies FUJITSU Business Application ID Link Manager II V1.8 and earlier —
Fsas Technologies FUJITSU Software ID Link Manager V2.0 —
Fsas Technologies FUJITSU Software TIME CREATOR ID Link Manager V2.3.0, V2.3.1, V2.4, V2.5, V2.6, and V2.7, V3.0, V3.0.2, V3.0.2.1, and V3.0.3 —
Fsas Technologies FUJITSU Software TIME CREATOR ID Link Manager SaaS Versions before the maintenance on June 16, 2024 —

References