Medium SSA-295483 1 CVE

SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module

Published Oct 10, 2023 · Updated Oct 10, 2023

Vendor: Siemens Product: Mendix Forgot Password (Mendix 10 compatible) Product: Mendix Forgot Password (Mendix 7 compatible) Product: Mendix Forgot Password (Mendix 8 compatible) Product: Mendix Forgot Password (Mendix 9 compatible)

Summary

The Mendix Forgot Password module contains a user enumeration vulnerability that could allow an attacker to retrieve valid users.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Medium 5.3

CVE-2023-43623

A vulnerability has been identified in Mendix Forgot Password (Mendix 10 compatible) (All versions < V5.4.0), Mendix Fo…

Siemens Mendix Forgot Password (Mendix 8 compatible) Mendix Forgot Password (Mendix 7 compatible) Mendix Forgot Password (Mendix 9 compatible) ICS / OT

Oct 10, 2023

Revision history

2023-10-10 #1
Publication Date

References

SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-295483.html
SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-295483.pdf
SSA-295483: User Enumeration Vulnerability in Mendix Forgot Password Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-295483.txt