All the vulnerabilites related to Fsas Technologies Inc. - FUJITSU Business Application ID Link Manager II
cve-2024-33620
Vulnerability from cvelistv5
Published
2024-06-18 05:44
Modified
2024-08-13 19:17
Severity ?
EPSS score ?
Summary
Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker.
References
Impacted products
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:36:04.361Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
},
{
"affected": [
{
"cpes": [
"cpe:2.3:a:fujitsu:business_application_id_link_manager_ii:*:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "business_application_id_link_manager_ii",
"vendor": "fujitsu",
"versions": [
{
"lessThanOrEqual": "1.8",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:id_link_manager:2.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.3.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.3.1:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.3.1"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.4:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.4"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.5:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.5"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.6:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.6"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:2.7:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "2.7"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.2"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.2.1:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.2.1"
}
]
},
{
"cpes": [
"cpe:2.3:a:fujitsu:time_creator_id_link_manager:3.0.3:*:*:*:*:*:*:*"
],
"defaultStatus": "unknown",
"product": "time_creator_id_link_manager",
"vendor": "fujitsu",
"versions": [
{
"status": "affected",
"version": "3.0.3"
}
]
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.6,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-33620",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-08-12T17:27:20.527344Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-36",
"description": "CWE-36 Absolute Path Traversal",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-08-13T19:17:23.562Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Absolute path traversal vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, the file contents including sensitive information on the server may be retrieved by an unauthenticated remote attacker."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Absolute path traversal",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:53.121Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-33620",
"datePublished": "2024-06-18T05:44:53.121Z",
"dateReserved": "2024-05-22T00:23:59.245Z",
"dateUpdated": "2024-08-13T19:17:23.562Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2024-33622
Vulnerability from cvelistv5
Published
2024-06-18 05:44
Modified
2024-11-21 15:37
Severity ?
EPSS score ?
Summary
Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-33622",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-07-01T16:30:50.447465Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-306",
"description": "CWE-306 Missing Authentication for Critical Function",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-21T15:37:25.545Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:36:04.055Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager SaaS",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "Versions before the maintenance on June 16"
},
{
"status": "affected",
"version": " 2024"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Missing authentication for critical function vulnerability exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, sensitive information may be obtained and/or the information stored in the database may be altered by a remote authenticated attacker."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Missing authentication for critical function",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:18.590Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-33622",
"datePublished": "2024-06-18T05:44:18.590Z",
"dateReserved": "2024-05-22T00:24:00.288Z",
"dateUpdated": "2024-11-21T15:37:25.545Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
cve-2024-34024
Vulnerability from cvelistv5
Published
2024-06-18 05:44
Modified
2024-11-15 20:34
Severity ?
EPSS score ?
Summary
Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not.
References
Impacted products
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 6.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2024-34024",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2024-06-18T13:28:09.078006Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-noinfo Not enough information",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-11-15T20:34:45.643Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"providerMetadata": {
"dateUpdated": "2024-08-02T02:42:59.931Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_transferred"
],
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"tags": [
"x_transferred"
],
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "FUJITSU Business Application ID Link Manager II",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V1.8 and earlier"
}
]
},
{
"product": "FUJITSU Software ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.0"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V2.3.0"
},
{
"status": "affected",
"version": " V2.3.1"
},
{
"status": "affected",
"version": " V2.4"
},
{
"status": "affected",
"version": " V2.5"
},
{
"status": "affected",
"version": " V2.6"
},
{
"status": "affected",
"version": " and V2.7"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "V3.0"
},
{
"status": "affected",
"version": " V3.0.2"
},
{
"status": "affected",
"version": " V3.0.2.1"
},
{
"status": "affected",
"version": " and V3.0.3"
}
]
},
{
"product": "FUJITSU Software TIME CREATOR ID Link Manager SaaS",
"vendor": "Fsas Technologies Inc.",
"versions": [
{
"status": "affected",
"version": "Versions before the maintenance on June 16"
},
{
"status": "affected",
"version": " 2024"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Observable response discrepancy issue exists in ID Link Manager and FUJITSU Software TIME CREATOR. If this vulnerability is exploited, an unauthenticated remote attacker may determine if a username is valid or not."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "Observable response discrepancy",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2024-06-18T05:44:59.077Z",
"orgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"shortName": "jpcert"
},
"references": [
{
"url": "https://www.fujitsu.com/jp/group/fsas/about/resources/security/2024/0617.html"
},
{
"url": "https://jvn.jp/en/jp/JVN65171386/"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "ede6fdc4-6654-4307-a26d-3331c018e2ce",
"assignerShortName": "jpcert",
"cveId": "CVE-2024-34024",
"datePublished": "2024-06-18T05:44:59.077Z",
"dateReserved": "2024-05-22T00:24:01.201Z",
"dateUpdated": "2024-11-15T20:34:45.643Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}