CVE-2021-33712CWE-345

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2)

published June 8, 2021

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00604 · 48.3th percentile
Weakness
CWE-345 · Insufficient Verification of Data Authenticity
Published
2021-06-08T19:47Z
EPSS history
Timeline
  • 08 JUN 19:47Z
    A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2)
    cvelistv5