Lucene search
+L

28 matches found

CNVD
CNVD
•added 2021/06/09 12:00 a.m.•24 views

Siemens Mendix SAML Module Elevation of Privilege Vulnerability

The Mendix SAML Module allows authenticating users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An elevation of privilege vulnerability exists in the Siemens Mendix SAML Module. An authenticated, remote attacker coul...

8.8CVSS6.9AI score0.00604EPSS
SaveExploits0References1
OSV
OSV
•added 2021/06/08 8:15 p.m.•18 views

CVE-2021-33712

A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...

8.8CVSS5.7AI score0.00604EPSS
SaveExploits0References1
NVD
NVD
•added 2021/06/08 8:15 p.m.•40 views

CVE-2021-33712

A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...

8.8CVSS0.00604EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/06/08 8:15 p.m.•10 views

CVE-2021-33712

A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...

8.8CVSS7.1AI score0.00604EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/06/08 7:47 p.m.•47 views

CVE-2021-33712

A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...

8.6AI score0.00604EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/06/08 12:00 a.m.•9 views

CVE-2021-33712: Insufficient Verification of Data Authenticity

A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...

8.8CVSS5.8AI score0.00604EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/06/08 12:00 a.m.•20 views

Mendix SAML 数据伪造问题漏洞

The Mendix SAML Module allows authenticating users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An elevation of privilege vulnerability exists in the Siemens Mendix SAML Module. An authenticated, remote attacker coul...

8.8CVSS5.7AI score0.00604EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2021/06/08 12:00 a.m.•4 views

PT-2021-20288

Name of the Vulnerable Software and Affected Versions: Mendix SAML Module versions prior to V2.1.2 Description: A vulnerability has been identified in the configuration of the SAML module, which does not properly check various restrictions and validations imposed by an identity provider. This cou...

8.8CVSS0.00604EPSS
SaveExploits0References3
Rows per page
Query Builder