Medium SSA-414513 1 CVE

SSA-414513: Information Disclosure Vulnerability in Mendix

Published Apr 12, 2022 · Updated Jul 12, 2022 · Revision 3

Vendor: Siemens Product: Mendix Applications using Mendix 7 Product: Mendix Applications using Mendix 8 Product: Mendix Applications using Mendix 9 Product: Mendix Applications using Mendix 9 (V9.6)

Summary

An information disclosure vulnerability in Mendix applications was discovered. The vulnerability could allow to read sensitive data.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Unscored —

CVE-2022-27241

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.31), Mendix Application…

Siemens Mendix Applications using Mendix 9 Mendix Applications using Mendix 8 Mendix Applications using Mendix 7 ICS / OT

Apr 12, 2022

Revision history

2022-07-12 #3
Added fix for Mendix Applications using Mendix 9 (V9.6)
2022-06-14 #2
Added fix for Mendix Applications using Mendix 7 and 8. Fix planned for Mendix Applications using Mendix 9 (V.9.6)
2022-04-12 #1
Publication Date

References

SSA-414513: Information Disclosure Vulnerability in Mendix - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-414513.pdf
SSA-414513: Information Disclosure Vulnerability in Mendix - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-414513.txt