Siemens Mendix SAML Module
view advisory published 2021-06-08
The latest update of Mendix SAML module fixes a privilege escalation vulnerability. Mendix has released an update for the Mendix SAML module and recommends to update to the latest version.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33712US | high8.8OT elevated | — | ||
A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations… | ||||
02
references
External citations — patches, advisories, analysis.
- SSA-522654: Privilege Escalation Vulnerability in Mendix SAML Module - CSAF Versionself
- SSA-522654: Privilege Escalation Vulnerability in Mendix SAML Module - PDF Versionself
- SSA-522654: Privilege Escalation Vulnerability in Mendix SAML Module - TXT Versionself
- ICS Advisory ICSA-21-159-07 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-21-159-07 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- FixedMendix SAML Module
Update to V2.1.2 or later version
https://marketplace.mendix.com/link/component/1174
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan