CVE-2022-44457

🗓️ 08 Nov 2022 00:00:00Reported by siemensType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 52 Views

A vulnerability in Mendix SAML (Mendix 7, 8, 9 compatible) allows packet capture replay. Incomplete fix for CVE-2022-37011 in non-default configuration

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2022-44457	8 Nov 202214:35	–	circl
CNNVD	Siemens Mendix SAML Module 安全漏洞	8 Nov 202200:00	–	cnnvd
CNVD	Siemens Mendix SAML Module Certification Bypass Vulnerability	9 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-44457	8 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-47400	3 Oct 202520:07	–	euvd
ICS	Siemens Mendix SAML Module	13 Sep 202200:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	13 Dec 202200:00	–	ncsc
NVD	CVE-2022-44457	8 Nov 202211:15	–	nvd
Prion	Default configuration	8 Nov 202211:15	–	prion
Positive Technologies	PT-2022-27223 · Mendix · Mendix Saml	8 Nov 202200:00	–	ptsecurity

NVD

Node

mendix samlRange<1.17.0

mendix samlRange2.3.0–2.3.2

mendix samlRange3.3.0–3.3.4

[
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 7 compatible)",
    "versions": [
      {
        "version": "All versions < V1.17.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 7 compatible)",
    "versions": [
      {
        "version": "All versions >= V1.17.0 < V1.17.2",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 8 compatible)",
    "versions": [
      {
        "version": "All versions < V2.3.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 8 compatible)",
    "versions": [
      {
        "version": "All versions >= V2.3.0 < V2.3.2",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 9 compatible, New Track)",
    "versions": [
      {
        "version": "All versions < V3.3.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 9 compatible, New Track)",
    "versions": [
      {
        "version": "All versions >= V3.3.1 < V3.3.5",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
    "versions": [
      {
        "version": "All versions < V3.3.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Siemens",
    "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
    "versions": [
      {
        "version": "All versions >= V3.3.0 < V3.3.4",
        "status": "affected"
      }
    ]
  }
]