Siemens Polarion ALM
The Subversion Webclient in Polarion ALM contains a cross-site scripting vulnerability, that could be triggered by an attacker by sending crafted links to an administrator user of Polarion ALM. Siemens has released an update for the Subversion Webclient in Polarion ALM and recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-44478US | medium6.1 | — | ||
A vulnerability has been identified in Polarion ALM (All versions < V21 R2 P2), Polarion WebClient for SVN (All versions). A cross-site scripting is present due to improper neutral… | ||||
references
External citations — patches, advisories, analysis.
- SSA-562051: Cross-Site Scripting Vulnerability in Polarion ALM - CSAF Versionself
- SSA-562051: Cross-Site Scripting Vulnerability in Polarion ALM - PDF Versionself
- SSA-562051: Cross-Site Scripting Vulnerability in Polarion ALM - TXT Versionself
- ICS Advisory ICSA-22-069-08 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-22-069-08 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
remediations (4)
- MitigationPolarion ALM
Do not open links from untrusted sources while working on Polarion Subversion webclient
- MitigationPolarion WebClient for SVN
Do not open links from untrusted sources while working on Polarion Subversion webclient
- No fix plannedPolarion WebClient for SVN
Currently no fix is planned
- FixedPolarion ALM
Update to V21 R2 P2 or later version
https://support.sw.siemens.com/knowledge-base/PL8613685
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan