A vulnerability has been identified in Mendix Applications using Mendix 7 (All versions < V7.23.19), Mendix Applications using Mendix 8 (All versions < V8.17.0), Mendix Applications using Mendix 8 (V8.12) (All versions < V8.12.5), Mendix Applications using Mendix 8 (V8.6) (All versions < V8.6.9), Mendix Applications using Mendix 9 (All versions < V9.0.5). Authenticated, non-administrative users could modify their privileges by manipulating the user role under certain circumstances, allowing them to gain administrative privileges.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Mendix Applications using Mendix 7
Vendor
Siemens
Product
Mendix Applications using Mendix 7
Platforms
Unknown
Default status
Unknown
Mendix Applications using Mendix 7 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V7.23.19
affected
Unavailable
Unavailable
Unavailable
None listed
Mendix Applications using Mendix 8
Vendor
Siemens
Product
Mendix Applications using Mendix 8
Platforms
Unknown
Default status
Unknown
Mendix Applications using Mendix 8 · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V8.17.0
affected
Unavailable
Unavailable
Unavailable
None listed
Mendix Applications using Mendix 8 (V8.12)
Vendor
Siemens
Product
Mendix Applications using Mendix 8 (V8.12)
Platforms
Unknown
Default status
Unknown
Mendix Applications using Mendix 8 (V8.12) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V8.12.5
affected
Unavailable
Unavailable
Unavailable
None listed
Mendix Applications using Mendix 8 (V8.6)
Vendor
Siemens
Product
Mendix Applications using Mendix 8 (V8.6)
Platforms
Unknown
Default status
Unknown
Mendix Applications using Mendix 8 (V8.6) · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
All versions < V8.6.9
affected
Unavailable
Unavailable
Unavailable
None listed
Mendix Applications using Mendix 9
Vendor
Siemens
Product
Mendix Applications using Mendix 9
Platforms
Unknown
Default status
Unknown
Mendix Applications using Mendix 9 · Scoped product and version facts