SSA-415938: Improper Access Control Vulnerability in Mendix
view advisory published 2022-03-08
A vulnerability in Mendix Studio Pro was discovered, that, if acted upon by a malicious user, could allow to retrieve the status of a job run by another user in certain cases. Mendix has released updates for the affected product lines, recommends to update to the latest versions and to redeploy the applications.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-26317US | medium6.5OT elevated | — | ||
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.29). When returning the result of a completed Microflow execution call the affected… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- FixedMendix Applications using Mendix 7
Update your Mendix Project to V7.23.29 or later version and redeploy your application
https://docs.mendix.com/releasenotes/studio-pro/7.23
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan