Siemens Mendix Forgot Password Module
Advisory ansehen veröffentlicht 2023-10-10
The Mendix Forgot Password module contains a user enumeration vulnerability that could allow an attacker to retrieve valid users. Siemens has released updates for the affected products and recommends to update to the latest versions.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-43623US | — | — | ||
A vulnerability has been identified in Mendix Forgot Password (Mendix 10 compatible) (All versions < V5.4.0), Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.3),… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module - CSAF Versionself
- SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module - HTML Versionself
- SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module - PDF Versionself
- SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module - TXT Versionself
- ICS Advisory ICSA-23-285-11 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSA-23-285-11 - Web Versionself
- Recommended Practicesexternal
03
Behebungen (4)
- BehobenMendix Forgot Password (Mendix 10 compatible)
Update to V5.4.0 or later version
https://marketplace.mendix.com/link/component/1296 - BehobenMendix Forgot Password (Mendix 7 compatible)
Update to V3.7.3 or later version
https://marketplace.mendix.com/link/component/1296 - BehobenMendix Forgot Password (Mendix 8 compatible)
Update to V4.1.3 or later version
https://marketplace.mendix.com/link/component/1296 - BehobenMendix Forgot Password (Mendix 9 compatible)
Update to V5.4.0 or later version
https://marketplace.mendix.com/link/component/1296
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan