Vulnerability · Published Jun 18, 2024 · Assigned by jpcert
CVE-2024-34024
Medium 6.3
In plain English
A medium-severity security flaw in FUJITSU Business Application ID Link Manager II from Fsas Technologies Inc.. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 30% of all known vulnerabilities).
Severity (CVSS 3.1)6.3Medium
Exploit odds (30 days)0.4%top 70.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II | V1.8 and earlier |
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager | V2.0 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager | V2.3.0 V2.3.1 V2.4 V2.5 V2.6 and V2.7 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager | V3.0 V3.0.2 V3.0.2.1 and V3.0.3 |
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager SaaS | Versions before the maintenance on June 16 2024 |