CVE-2024-50313: Race Condition
A vulnerability has been identified in Mendix Runtime V10 (All versions < V10.16.0 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.12 (All versions < V10.12.7 only if the basic authentication mechanism is used by the application), Mendix Runtime V10.6 (All versions < V10.6.15 only if the basic authentication mechanism is used by the application), Mendix Runtime V8 (All versions only if the basic authentication mechanism is used by the application), Mendix Runtime V9 (All versions < V9.24.29 only if the basic authentication mechanism is used by the application). The basic authentication implementation of affected applications contains a race condition vulnerability which could allow unauthenticated remote attackers to circumvent default account lockout measures.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-50313?
CVE-2024-50313 is classified as a medium severity vulnerability due to potential exploitation risks related to basic authentication.
How do I fix CVE-2024-50313?
To fix CVE-2024-50313, upgrade to Mendix Runtime version 10.16.0 or later for the affected versions.
Which versions are affected by CVE-2024-50313?
CVE-2024-50313 affects all versions of Mendix Runtime V10 below 10.16.0 and V10.12 below 10.12.7 when basic authentication is used.
What types of applications are vulnerable to CVE-2024-50313?
Applications using Mendix Runtime with basic authentication mechanisms are vulnerable to CVE-2024-50313.
Are there any notable characteristics of CVE-2024-50313?
CVE-2024-50313 specifically targets applications relying on basic authentication within specific versions of Mendix Runtime.