CVE-2024-33622

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - vultures@jpcert.or.jp

Published

2024-06-18

Last modified

2024-11-21

Weaknesses

CWE-306

Affected products

• Fujitsu Business Application Id Link Manager Ii (Fsas Technologies Inc.)
• Fujitsu Software Id Link Manager (Fsas Technologies Inc.)
• Fujitsu Software Time Creator Id Link Manager (Fsas Technologies Inc.)
• Fujitsu Software Time Creator Id Link Manager Saas (Fsas Technologies Inc.)

References

• https://jvn.jp/en/jp/JVN65171386/
• https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html