Description
A vulnerability has been identified in Polarion V2310 (All versions), Polarion V2404 (All versions < V2404.2). The login implementation of the affected application contains an observable response discrepancy vulnerability when validating usernames. This could allow an unauthenticated remote attacker to distinguish between valid and invalid usernames.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Polarion V2310 | — | — |
| Siemens | Polarion V2404 | < V2404.2 | V2404.2 |
Advisories 3
- NCSC-2025-0160 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · May 14, 2025
- ICSA-25-135-11 Siemens Polarion CISA ICS & IT advisories · May 13, 2025
- SSA-162255 SSA-162255: Multiple Vulnerabilities in Polarion Before V2410 Siemens ProductCERT · May 13, 2025