Vulnerability · Published Jun 18, 2024 · Assigned by jpcert
CVE-2024-33622
Medium 6.5
In plain English
A medium-severity missing authentication in FUJITSU Business Application ID Link Manager II from Fsas Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 38% of all known vulnerabilities).
Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.4%top 61.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II | V1.8 and earlier |
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager | V2.0 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager | V2.3.0 V2.3.1 V2.4 V2.5 V2.6 and V2.7 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager | V3.0 V3.0.2 V3.0.2.1 and V3.0.3 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager SaaS | Versions before the maintenance on June 16 2024 |
Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N