Search
Find a vulnerability
Search criteria
7 vulnerabilities found for FUJITSU Software ID Link Manager by Fsas Technologies Inc.
CVE-2024-34024 (GCVE-0-2024-34024)
Vulnerability from nvd – Published: 2024-06-18 05:44 – Updated: 2024-11-15 20:34
VLAI
EPSS
VEX
Summary
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
Severity
6.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Observable response discrepancy
- CWE-noinfo Not enough information
Assigner
References
2 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II |
Affected:
V1.8 and earlier
|
|
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager |
Affected:
V2.0
|
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V2.3.0
Affected: V2.3.1 Affected: V2.4 Affected: V2.5 Affected: V2.6 Affected: and V2.7 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V3.0
Affected: V3.0.2 Affected: V3.0.2.1 Affected: and V3.0.3 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager SaaS |
Affected:
Versions before the maintenance on June 16
Affected: 2024 |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-34024",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-18T13:28:09.078006Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-15T20:34:45.643Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:42:59.931Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager SaaS",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "Versions before the maintenance on June 16"
},
{
"status": "affected",
"version": " 2024"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Observable response discrepancy",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:59.077Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-34024",
"datePublished": "2024-06-18T05:44:59.077Z",
"dateReserved": "2024-05-22T00:24:01.201Z",
"dateUpdated": "2024-11-15T20:34:45.643Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-33622 (GCVE-0-2024-33622)
Vulnerability from nvd – Published: 2024-06-18 05:44 – Updated: 2024-11-21 15:37
VLAI
EPSS
VEX
Summary
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Missing authentication for critical function
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
2 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II |
Affected:
V1.8 and earlier
|
|
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager |
Affected:
V2.0
|
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V2.3.0
Affected: V2.3.1 Affected: V2.4 Affected: V2.5 Affected: V2.6 Affected: and V2.7 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V3.0
Affected: V3.0.2 Affected: V3.0.2.1 Affected: and V3.0.3 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager SaaS |
Affected:
Versions before the maintenance on June 16
Affected: 2024 |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-33622",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-01T16:30:50.447465Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-21T15:37:25.545Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:36:04.055Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager SaaS",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "Versions before the maintenance on June 16"
},
{
"status": "affected",
"version": " 2024"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Missing authentication for critical function",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:18.590Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-33622",
"datePublished": "2024-06-18T05:44:18.590Z",
"dateReserved": "2024-05-22T00:24:00.288Z",
"dateUpdated": "2024-11-21T15:37:25.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-33620 (GCVE-0-2024-33620)
Vulnerability from nvd – Published: 2024-06-18 05:44 – Updated: 2024-08-13 19:17
VLAI
EPSS
VEX
Summary
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- Absolute path traversal
- CWE-36 - Absolute Path Traversal
Assigner
References
2 references
Impacted products
16 products
| Vendor | Product | Version | |
|---|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II |
Affected:
V1.8 and earlier
|
|
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager |
Affected:
V2.0
|
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V2.3.0
Affected: V2.3.1 Affected: V2.4 Affected: V2.5 Affected: V2.6 Affected: and V2.7 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V3.0
Affected: V3.0.2 Affected: V3.0.2.1 Affected: and V3.0.3 |
|
| fujitsu | business_application_id_link_manager_ii |
Affected:
0 , ≤ 1.8
(custom)
cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:* |
|
| fujitsu | id_link_manager |
Affected:
2.0
cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.3.0
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.3.1
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.4
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.5
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.6
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.7
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0.2
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0.2.1
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0.3
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:36:04.361Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "business_application_id_link_manager_ii",
"vendor": "fujitsu",
"versions": [
{
"lessThanOrEqual": "1.8",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.3.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.3.1"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.4"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.5"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.6"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.7"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.2.1"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.3"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-33620",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-12T17:27:20.527344Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-36",
"description": "CWE-36 Absolute Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-08-13T19:17:23.562Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Absolute path traversal",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:53.121Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-33620",
"datePublished": "2024-06-18T05:44:53.121Z",
"dateReserved": "2024-05-22T00:23:59.245Z",
"dateUpdated": "2024-08-13T19:17:23.562Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-34024 (GCVE-0-2024-34024)
Vulnerability from cvelistv5 – Published: 2024-06-18 05:44 – Updated: 2024-11-15 20:34
VLAI
EPSS
VEX
Summary
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
Severity
6.3 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Observable response discrepancy
- CWE-noinfo Not enough information
Assigner
References
2 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II |
Affected:
V1.8 and earlier
|
|
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager |
Affected:
V2.0
|
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V2.3.0
Affected: V2.3.1 Affected: V2.4 Affected: V2.5 Affected: V2.6 Affected: and V2.7 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V3.0
Affected: V3.0.2 Affected: V3.0.2.1 Affected: and V3.0.3 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager SaaS |
Affected:
Versions before the maintenance on June 16
Affected: 2024 |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-34024",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-18T13:28:09.078006Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-15T20:34:45.643Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:42:59.931Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager SaaS",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "Versions before the maintenance on June 16"
},
{
"status": "affected",
"version": " 2024"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Observable response discrepancy",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:59.077Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-34024",
"datePublished": "2024-06-18T05:44:59.077Z",
"dateReserved": "2024-05-22T00:24:01.201Z",
"dateUpdated": "2024-11-15T20:34:45.643Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-33620 (GCVE-0-2024-33620)
Vulnerability from cvelistv5 – Published: 2024-06-18 05:44 – Updated: 2024-08-13 19:17
VLAI
EPSS
VEX
Summary
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
Severity
8.6 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- Absolute path traversal
- CWE-36 - Absolute Path Traversal
Assigner
References
2 references
Impacted products
16 products
| Vendor | Product | Version | |
|---|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II |
Affected:
V1.8 and earlier
|
|
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager |
Affected:
V2.0
|
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V2.3.0
Affected: V2.3.1 Affected: V2.4 Affected: V2.5 Affected: V2.6 Affected: and V2.7 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V3.0
Affected: V3.0.2 Affected: V3.0.2.1 Affected: and V3.0.3 |
|
| fujitsu | business_application_id_link_manager_ii |
Affected:
0 , ≤ 1.8
(custom)
cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:* |
|
| fujitsu | id_link_manager |
Affected:
2.0
cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.3.0
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.3.1
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.4
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.5
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.6
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
2.7
cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0.2
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0.2.1
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:* |
|
| fujitsu | time_creator_id_link_manager |
Affected:
3.0.3
cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:36:04.361Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "business_application_id_link_manager_ii",
"vendor": "fujitsu",
"versions": [
{
"lessThanOrEqual": "1.8",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.3.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.3.1"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.4"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.5"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.6"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.7"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.2.1"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.3"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-33620",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-12T17:27:20.527344Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-36",
"description": "CWE-36 Absolute Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-08-13T19:17:23.562Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Absolute path traversal",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:53.121Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-33620",
"datePublished": "2024-06-18T05:44:53.121Z",
"dateReserved": "2024-05-22T00:23:59.245Z",
"dateUpdated": "2024-08-13T19:17:23.562Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2024-33622 (GCVE-0-2024-33622)
Vulnerability from cvelistv5 – Published: 2024-06-18 05:44 – Updated: 2024-11-21 15:37
VLAI
EPSS
VEX
Summary
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.
Severity
6.5 (Medium)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator (v2.0.3)
CWE
- Missing authentication for critical function
- CWE-306 - Missing Authentication for Critical Function
Assigner
References
2 references
Impacted products
5 products
| Vendor | Product | Version | |
|---|---|---|---|
| Fsas Technologies Inc. | FUJITSU Business Application ID Link Manager II |
Affected:
V1.8 and earlier
|
|
| Fsas Technologies Inc. | FUJITSU Software ID Link Manager |
Affected:
V2.0
|
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V2.3.0
Affected: V2.3.1 Affected: V2.4 Affected: V2.5 Affected: V2.6 Affected: and V2.7 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager |
Affected:
V3.0
Affected: V3.0.2 Affected: V3.0.2.1 Affected: and V3.0.3 |
|
| Fsas Technologies Inc. | FUJITSU Software TIME CREATOR ID Link Manager SaaS |
Affected:
Versions before the maintenance on June 16
Affected: 2024 |
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-33622",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-01T16:30:50.447465Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-21T15:37:25.545Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:36:04.055Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager SaaS",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "Versions before the maintenance on June 16"
},
{
"status": "affected",
"version": " 2024"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Missing authentication for critical function",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:18.590Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-33622",
"datePublished": "2024-06-18T05:44:18.590Z",
"dateReserved": "2024-05-22T00:24:00.288Z",
"dateUpdated": "2024-11-21T15:37:25.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
JVNDB-2024-000063
Vulnerability from jvndb - Published: 2024-06-18 13:43 - Updated:2024-06-18 13:43
Severity
Summary
Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR
Details
ID Link Manager and FUJITSU Software TIME CREATOR provided by Fsas Technologies Inc. contain multiple vulnerabilities listed below.
* Path Traversal (CWE-36) (CVE-2024-33620)
* Missing Authentication (CWE-306) (CVE-2024-33622)
* Information disclosure (CWE-204) (CVE-2024-34024)
Christian Demko of WithSecure KK reported these vulnerabilities to JPCERT/CC.
JPCERT/CC coordinated with the developer Fsas Technologies Inc.
References
| Type | URL | ||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
|||||||||||||||||||||||
Impacted products
{
"@rdf:about": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000063.html",
"dc:date": "2024-06-18T13:43+09:00",
"dcterms:issued": "2024-06-18T13:43+09:00",
"dcterms:modified": "2024-06-18T13:43+09:00",
"description": "ID Link Manager and FUJITSU Software TIME CREATOR provided by Fsas Technologies Inc. contain multiple vulnerabilities listed below.\r\n\r\n* Path Traversal (CWE-36) (CVE-2024-33620)\r\n* Missing Authentication (CWE-306) (CVE-2024-33622)\r\n* Information disclosure (CWE-204) (CVE-2024-34024)\r\n\r\nChristian Demko of WithSecure KK reported these vulnerabilities to JPCERT/CC.\r\nJPCERT/CC coordinated with the developer Fsas Technologies Inc.",
"link": "https://jvndb.jvn.jp/en/contents/2024/JVNDB-2024-000063.html",
"sec:cpe": [
{
"#text": "cpe:/a:misc:fsas_technologies_fujitsu_business_application_id_link_manager2",
"@product": "FUJITSU Business Application ID Link ManagerII",
"@vendor": "Fsas Technologies Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:misc:fsas_technologies_fujitsu_software_id_link_manager",
"@product": "FUJITSU Software ID Link Manager",
"@vendor": "Fsas Technologies Inc.",
"@version": "2.2"
},
{
"#text": "cpe:/a:misc:fsas_technologies_fujitsu_software_time_creator_id_link_manager",
"@product": "FUJITSU Software TIME CREATOR ID Link Manager",
"@vendor": "Fsas Technologies Inc.",
"@version": "2.2"
}
],
"sec:cvss": {
"@score": "8.6",
"@severity": "High",
"@type": "Base",
"@vector": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"@version": "3.0"
},
"sec:identifier": "JVNDB-2024-000063",
"sec:references": [
{
"#text": "https://jvn.jp/en/jp/JVN65171386/index.html",
"@id": "JVN#65171386",
"@source": "JVN"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-33620",
"@id": "CVE-2024-33620",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-33622",
"@id": "CVE-2024-33622",
"@source": "CVE"
},
{
"#text": "https://www.cve.org/CVERecord?id=CVE-2024-34024",
"@id": "CVE-2024-34024",
"@source": "CVE"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-200",
"@title": "Information Exposure(CWE-200)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-22",
"@title": "Path Traversal(CWE-22)"
},
{
"#text": "https://www.ipa.go.jp/en/security/vulnerabilities/cwe.html",
"@id": "CWE-287",
"@title": "Improper Authentication(CWE-287)"
}
],
"title": "Multiple vulnerabilities in ID Link Manager and FUJITSU Software TIME CREATOR"
}