Medium severity · published Jun 18, 2024
CVE-2024-34024
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FB
FUJITSU Business Application ID Link Manager II · Fsas Technologies Inc.
V1.8 and earlier · source: vendor
FS
FUJITSU Software ID Link Manager · Fsas Technologies Inc.
V2.0 · source: vendor
FS
FUJITSU Software TIME CREATOR ID Link Manager · Fsas Technologies Inc.
V2.3.0; V2.3.1; V2.4; V2.5; V2.6; and V2.7; +4 more · source: vendor
FS
FUJITSU Software TIME CREATOR ID Link Manager SaaS · Fsas Technologies Inc.
Versions before the maintenance on June 16; 2024 · source: vendor
Affected product
FB
FUJITSU Business Application ID Link Manager II
Fsas Technologies Inc.
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-34024
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-34024
jvn.jp
https://jvn.jp/en/jp/JVN65171386/
www.fujitsu.com
https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html
More from FUJITSU Business Application ID Link Manager II
8.6
CVE-2024-33620
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR
6.5
CVE-2024-33622
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR