CVE-2021-42026: Medium severity mendix vulnerability
A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control read access for certain client actions. This could allow authenticated attackers to retrieve the changedDate attribute of arbitrary objects, even when they don't have read access to them.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is CVE-2021-42026?
CVE-2021-42026 is a vulnerability identified in Mendix Applications using Mendix 8 (All versions < V8.18.13) and Mendix Applications using Mendix 9 (All versions < V9.6.2).
How does CVE-2021-42026 impact Mendix Applications?
CVE-2021-42026 allows unauthorized users to gain read access to certain client actions in Mendix Applications.
What is the severity of CVE-2021-42026?
CVE-2021-42026 has a severity rating of 4.3, which is considered medium.
How can I fix CVE-2021-42026 in my Mendix Applications?
To fix CVE-2021-42026, you should update your Mendix Applications to versions V8.18.13 or V9.6.2 or newer.
Where can I find more information about CVE-2021-42026?
You can find more information about CVE-2021-42026 in the reference document at https://cert-portal.siemens.com/productcert/pdf/ssa-779699.pdf.