| |
Vulnerability CVE-2023-25957
Published: 2023-03-14
| Description: |
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All Versions >= 1.16.4 < 1.17.2), Mendix SAML (Mendix 8 compatible) (All versions >= 2.2.0 < 2.2.3), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= 3.1.9 < 3.2.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= 3.1.9 < 3.2.5). The affected versions of the module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. |
Type:
CWE-303 (Incorrect Implementation of Authentication Algorithm)
References: |
https://cert-portal.siemens.com/productcert/pdf/ssa-851884.pdf
|
|
|
Copyright 2024, cxsecurity.com
|
|
|
