SSA-210822 V1.1 (Last Update: 2023-01-10): Improper Access Control Vulnerability in Mendix Workflow Commons Module

Risk Summary

<p>The Mendix Workflow Commons module improperly handles access control for some module entities. This could allow authenticated remote attackers to read or delete sensitive information.</p> <p>Mendix has released updates for several version lines of the Mendix Workflow Commons module and recommends to update to the latest version.</p> <p>Note that the fix might slightly impact the module’s functionality in specific cases.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)