CVE-2023-45794
 
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications using Mendix 7 (All versions < V7.23.37), Mendix Applications using Mendix 8 (All versions < V8.18.27), Mendix Applications using Mendix 9 (All versions < V9.24.10). A capture-replay flaw in the platform could have an impact to apps built with the platform, if certain preconditions are met that depend on the app's model and access control design.
This could allow authenticated attackers to access or modify objects without proper authorization, or escalate privileges in the context of the vulnerable app.
Se ha identificado una vulnerabilidad en aplicaciones Mendix que usan:
Mendix 10 (todas las versiones < V10.4.0),
Mendix 7 (todas las versiones < V7.23.37),
Mendix 8 (todas las versiones < V8.18.27),
Mendix 9 (todas las versiones
CVSS Scores
SSVC
- Decision:-
Timeline
- 2023-10-12 CVE Reserved
- 2023-11-14 CVE Published
- 2024-08-02 CVE Updated
- 2024-10-14 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-294: Authentication Bypass by Capture-replay
CAPEC
References (1)
URL | Tag | Source |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|
URL | Date | SRC |
---|---|---|
https://cert-portal.siemens.com/productcert/pdf/ssa-084182.pdf | 2023-12-28 |
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Siemens Search vendor "Siemens" | Mendix Search vendor "Siemens" for product "Mendix" | >= 7.0.0 < 7.23.37 Search vendor "Siemens" for product "Mendix" and version " >= 7.0.0 < 7.23.37" | - |
Affected
| ||||||
Siemens Search vendor "Siemens" | Mendix Search vendor "Siemens" for product "Mendix" | >= 8.0.0 < 8.18.27 Search vendor "Siemens" for product "Mendix" and version " >= 8.0.0 < 8.18.27" | - |
Affected
| ||||||
Siemens Search vendor "Siemens" | Mendix Search vendor "Siemens" for product "Mendix" | >= 9.0.0 < 9.24.10 Search vendor "Siemens" for product "Mendix" and version " >= 9.0.0 < 9.24.10" | - |
Affected
| ||||||
Siemens Search vendor "Siemens" | Mendix Search vendor "Siemens" for product "Mendix" | >= 10.0.0 < 10.4.0 Search vendor "Siemens" for product "Mendix" and version " >= 10.0.0 < 10.4.0" | - |
Affected
|