SSA-352521: Access Check Bypass Vulnerability in Mendix
An incorrect authorization check in Mendix applications could allow an attacker to bypass write permissions to attributes of objects under certain circumstances. Mendix has released an update for Mendix and recommends to update to the latest version.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-33718US | medium5.3OT elevated | — | ||
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Applications using Mendix 8 (All versions < V8.18.7), Mendix Application… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedMendix Applications using Mendix 7
Update to V7.23.22 or later version
https://docs.mendix.com/releasenotes/studio-pro/7.23 - FixedMendix Applications using Mendix 8
Update to V8.18.7 or later version
https://docs.mendix.com/releasenotes/studio-pro/8.18 - FixedMendix Applications using Mendix 9
Update to V9.3.0 or later version
https://docs.mendix.com/releasenotes/studio-pro/9.3 - WorkaroundMendix Applications using Mendix 7
Add a new read attribute and move this up to become the first in the entity attribute table
- WorkaroundMendix Applications using Mendix 8
Add a new read attribute and move this up to become the first in the entity attribute table
- WorkaroundMendix Applications using Mendix 9
Add a new read attribute and move this up to become the first in the entity attribute table
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan