CVE-2021-33712: High severity mendix vulnerability
A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-33712?
CVE-2021-33712 is a vulnerability in Mendix SAML Module versions prior to V2.1.2 that allows a remote authenticated attacker to escalate privileges.
How severe is CVE-2021-33712?
CVE-2021-33712 has a severity rating of 8.8 (high).
How does CVE-2021-33712 affect Mendix SAML Module?
CVE-2021-33712 affects all versions of Mendix SAML Module below V2.1.2, allowing the configuration to not properly check various restrictions and validations imposed by an identity provider.
How can the CVE-2021-33712 vulnerability be exploited?
The CVE-2021-33712 vulnerability can be exploited by a remote authenticated attacker to escalate privileges.
Is there a fix for CVE-2021-33712?
Yes, the fix for CVE-2021-33712 is to update the Mendix SAML Module to version 2.1.2 or above.