Summary
Mendix Forgot Password Appstore module contains two vulnerabilities that could allow unauthorized users to take over accounts.
Mendix has released an update for the Mendix Forgot Password Appstore module and recommends to update to the latest version.
Vulnerabilities 2
-
Unscored —
A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1). In cer…
-
Unscored —
A vulnerability has been identified in Mendix Forgot Password Appstore module (All versions >= V3.3.0 < V3.5.1), Mendix…
Revision history
-
#2
Revision - Fixing typos
-
#1
Publication Date
References
-
SSA-134279: Vulnerability in Mendix Forgot Password Appstore module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-134279.txt
-
SSA-134279: Vulnerability in Mendix Forgot Password Appstore module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-134279.pdf
-
ICS Advisory ICSA-22-069-04 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-069-04
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B