Source |
CVE Liste |
Identifiant |
8318414 |
Date de publication |
2023-03-14 10:15:28 (vue: 2023-03-14 13:07:24) |
Titre |
CVE-2023-25957 |
Texte |
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All Versions >= 1.16.4 < 1.17.2), Mendix SAML (Mendix 8 compatible) (All versions >= 2.2.0 < 2.2.3), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= 3.1.9 < 3.2.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= 3.1.9 < 3.2.5). The affected versions of the module insufficiently verifies the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. |
Envoyé |
Oui |
Condensat |
2023 25957 access affected all allow application assertions attackers authentication been bypass compatible could cve get has identified insufficiently mendix module remote saml unauthenticated verifies versions vulnerability |
Tags |
Vulnerability
|
Stories |
|
Notes |
|
Move |
|