CVE-2022-46664

State: Published
Severity: 8.1 High
Published: Dec 13, 2022
Updated: Apr 21, 2025
Reserved: Dec 6, 2022

Description

A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module entities.

This could allow authenticated remote attackers to read or delete sensitive information.

Scores

CVSS	Score	Vector	Source
3.1	8.1 High	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C	siemens

Weaknesses

CWE-284 Improper Access Control

Affected Products

Product	Versions
Mendix Workflow CommonsSiemens	All versions < V2.4.0Affected
Mendix Workflow Commons V2.1Siemens	All versions < V2.1.4Affected
Mendix Workflow Commons V2.3Siemens	All versions < V2.3.2Affected

References

https://cert-portal.siemens.com/productcert/pdf/ssa-210822.pdf

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.