Description
A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module entities.
This could allow authenticated remote attackers to read or delete sensitive information.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Siemens | Mendix Workflow Commons | All versions < V2.4.0 | — |
| Siemens | Mendix Workflow Commons V2.1 | All versions < V2.1.4 | — |
| Siemens | Mendix Workflow Commons V2.3 | All versions < V2.3.2 | — |
Advisories 2
- ICSA-22-349-13 Siemens Mendix Workflow Commons CISA ICS & IT advisories · Jan 10, 2023
- SSA-210822 SSA-210822: Improper Access Control Vulnerability in Mendix Workflow Commons Module Siemens ProductCERT · Jan 10, 2023