SSA-338732 V1.0: Information Disclosure Vulnerability in Mendix

Risk Summary

<p>Applications built with affected versions of Mendix Studio Pro do not prevent file documents from being cached when files are opened or downloaded using a browser. This could allow a local attacker to read those documents by exploring the browser cache.</p> <p>Mendix has released updates for the affected product lines, recommends to update to the latest versions and to redeploy the applications.</p>

Remediations

• Refer to Siemens ProductCERT advisory for patch and remediation guidance.

Affected Vendors

Affected Products (1)