Summary
An incorrect authorization check in Mendix applications could allow an attacker to bypass write permissions to attributes of objects under certain circumstances.
Mendix has released an update for Mendix and recommends to update to the latest version.
Vulnerabilities 1
-
Unscored —
A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.22), Mendix Application…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-352521: Access Check Bypass Vulnerability in Mendix - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-352521.txt
-
SSA-352521: Access Check Bypass Vulnerability in Mendix - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-352521.pdf
-
ICS Advisory ICSA-21-194-16 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-194-16
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B