NewsSiemens ProductCERT

SSA-851884 V1.0: Authentication Bypass Vulnerability in Mendix SAML Module

The Mendix SAML module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. Mendix has provided fix releases for the Mendix SAML module and recommends to update to the latest version.

CVE-2023-29129Eine Schwachstelle wurde in Mendix SAML (Mendix 7 kompatibel) (Alle Versionen >= V1.
CVE-2023-29129Siemens Mendix SAML (Mendix 7 compatible): fehlerhafte Implementierung der Authentifizierung
CVE-2023-25957Siemens Mendix SAML (Mendix 7 compatible): fehlerhafte Implementierung der Authentifizierung
CVE-2023-25957Siemens ProductCERT Advisory SSA-851884
CVE-2023-25957Eine Schwachstelle wurde in Mendix SAML (Mendix 7 kompatibel) (Alle Versionen >= V1.

Affected vendors and products

Other advisories

CriticalCVE-2023-29129Siemens ProductCERT Advisory SSA-851884

Source: https://cert-portal.siemens.com/productcert/html/ssa-851884.html

Linked advisories

Affected vendors and products

More on SSA-851884

Other advisories