Medium SSA-699404 1 CVE

SSA-699404: Observable Response Discrepancy in Mendix Forgot Password Module

Published Apr 11, 2023 · Updated Apr 11, 2023

Vendor: Siemens Product: Mendix Forgot Password (Mendix 7 compatible) Product: Mendix Forgot Password (Mendix 8 compatible) Product: Mendix Forgot Password (Mendix 9 compatible)

Summary

The Mendix Forgot Password module contains an observable response discrepancy issue that could allow an attacker to retrieve sensitive information.

Siemens has released updates for the affected products and recommends to update to the latest versions.

Vulnerabilities 1

Medium 5.3

CVE-2023-27464

A vulnerability has been identified in Mendix Forgot Password (Mendix 7 compatible) (All versions < V3.7.1), Mendix For…

Siemens Mendix Forgot Password (Mendix 7 compatible) Mendix Forgot Password (Mendix 9 compatible) Mendix Forgot Password (Mendix 8 compatible) ICS / OT

Apr 11, 2023

Revision history

2023-04-11 #1
Publication Date

References

SSA-699404: Observable Response Discrepancy in Mendix Forgot Password Module - HTML Version
https://cert-portal.siemens.com/productcert/html/ssa-699404.html
SSA-699404: Observable Response Discrepancy in Mendix Forgot Password Module - PDF Version
https://cert-portal.siemens.com/productcert/pdf/ssa-699404.pdf
SSA-699404: Observable Response Discrepancy in Mendix Forgot Password Module - TXT Version
https://cert-portal.siemens.com/productcert/txt/ssa-699404.txt