A vulnerability has been identified in the Apache Lucene based query engine of Polarion ALM, which lacks proper access controls. This could allow an authenticated user to query items beyond the user's allowed projects, potentially granting unauthorized access to restricted functions.