CVE-2021-42026
- State
- Published
- Severity
- Not scored
- Published
- Nov 9, 2021
- Updated
- Aug 4, 2024
- Reserved
- Oct 6, 2021
Description
A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control read access for certain client actions. This could allow authenticated attackers to retrieve the changedDate attribute of arbitrary objects, even when they don't have read access to them.
Scores
The record has no CVSS score.
Weaknesses
- CWE-863 Incorrect Authorization
Affected Products
| Product | Versions |
|---|---|
Mendix Applications using Mendix 8Siemens |
|
Mendix Applications using Mendix 9Siemens |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.