Riskcovery

CVE-2021-27394

State
Published
Severity
Not scored
Published
Apr 16, 2021
Updated
Aug 3, 2024
Reserved
Feb 18, 2021

Read the record on cve.org

Description

A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions < V8.6.9), Mendix Applications using Mendix 9 (All versions < V9.0.5). Authenticated, non-administrative users could modify their privileges by manipulating the user role under certain circumstances, allowing them to gain administrative privileges.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-269 Improper Privilege Management

Affected Products

ProductVersions
Mendix Applications using Mendix 7Siemens
  • All versions < V7.23.19Affected
Mendix Applications using Mendix 8Siemens
  • All versions < V8.17.0Affected
Mendix Applications using Mendix 8 (V8.12)Siemens
  • All versions < V8.12.5Affected
Mendix Applications using Mendix 8 (V8.6)Siemens
  • All versions < V8.6.9Affected
Mendix Applications using Mendix 9Siemens
  • All versions < V9.0.5Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.