Improper Access Control in Polarion ALM

An authenticated user could view project data and documents they don't have permission to access, potentially exposing sensitive operational procedures, engineering designs, or configuration details used in your industrial processes.

Engineering, operations, and project management teams using Siemens Polarion ALM for document and project management. This includes utilities managing control system design documentation, asset configuration files, and operational procedures stored in the ALM system.

An attacker with valid Polarion ALM credentials (such as a contractor or disgruntled employee) could craft queries using the Lucene query engine to retrieve items from projects outside their assigned access level. The attacker makes direct queries through the ALM interface without needing to escalate privileges or exploit network paths.