Summary
The Mendix Email Connector module improperly handles access control for some module entities. This could allow authenticated remote attackers to read and manipulate sensitive information.
Mendix has released an update for the Mendix Email Connector module and recommends to update to the latest version.
Vulnerabilities 1
-
High 8.1
A vulnerability has been identified in Mendix Email Connector (All versions < V2.0.0). Affected versions of the module …
Revision history
-
#1
Publication Date
References
-
SSA-224632: Improper Access Control Vulnerability in Mendix Email Connector Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-224632.txt
-
SSA-224632: Improper Access Control Vulnerability in Mendix Email Connector Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-224632.pdf
-
ICS Advisory ICSA-22-349-17 - Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-22-349-17
-
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
-
Recommended Practices
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
Recommended Practices
https://www.cisa.gov/topics/industrial-control-systems
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
-
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B