Summary
The Mendix Workflow Commons module improperly handles access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information.
Mendix has released updates for several version lines of the Mendix Workflow Commons module and recommends to update to the latest version.
Note that the fix might slightly impact the module's functionality in specific cases.
Vulnerabilities 1
-
High 8.1
A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (A…
Revision history
-
#2
Added fix information for older version lines of Mendix Workflow Commons
-
#1
Publication Date
References
-
SSA-210822: Improper Access Control Vulnerability in Mendix Workflow Commons Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-210822.pdf
-
SSA-210822: Improper Access Control Vulnerability in Mendix Workflow Commons Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-210822.txt