VulnerabilityDeferred

CVE-2024-33622

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR.

MEDIUM 6.5EPSS 0.44%

Does this matter?

Lower severity and a low EPSS score (0.44%). Track it; it rarely justifies an emergency change on its own.

Description

Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.

CVSS 3.1: 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.44% probability · 37th percentile
CISA KEV: Not listed
Weakness: CWE-306
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN65171386/
https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html
https://jvn.jp/en/jp/JVN65171386/
https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.