VulnerabilityDeferred

CVE-2024-34024

If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.

MEDIUM 6.3EPSS 0.36%

Does this matter?

Lower severity and a low EPSS score (0.36%). Track it; it rarely justifies an emergency change on its own.

Description

Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.

CVSS 3.1: 6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
EPSS: 0.36% probability · 29th percentile
CISA KEV: Not listed
Source: vultures@jpcert.or.jp

References

https://jvn.jp/en/jp/JVN65171386/
https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html
https://jvn.jp/en/jp/JVN65171386/
https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.