PT-2023-1689 · Mendix · Mendix Saml

CVE-2023-25957 · Published 2023-03-14 · Updated 2023-08-08

Positive Technologies (AI Summary)

CVSS v2.0

9.4

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Mendix SAML (Mendix 7 compatible) versions 1.16.4 through 1.17.3 Mendix SAML (Mendix 8 compatible) versions 2.2.0 through 2.3.0 Mendix SAML (Mendix 9 latest compatible, New Track) versions 3.1.9 through 3.3.1 Mendix SAML (Mendix 9 latest compatible, Upgrade Track) versions 3.1.8 through 3.3.0 Mendix SAML (Mendix 9.6 compatible, New Track) versions 3.1.9 through 3.2.7 Mendix SAML (Mendix 9.6 compatible, Upgrade Track) versions 3.1.8 through 3.2.6

Description The issue is related to insufficient verification of SAML assertions in the affected versions of the Mendix SAML module. This could allow unauthenticated remote attackers to bypass authentication and gain access to the application. The vulnerability is connected to errors in the implementation of the authentication algorithm.

Recommendations For Mendix SAML (Mendix 7 compatible) versions 1.16.4 through 1.17.3, update to a version outside of this range. For Mendix SAML (Mendix 8 compatible) versions 2.2.0 through 2.3.0, update to a version outside of this range. For Mendix SAML (Mendix 9 latest compatible, New Track) versions 3.1.9 through 3.3.1, update to a version outside of this range. For Mendix SAML (Mendix 9 latest compatible, Upgrade Track) versions 3.1.8 through 3.3.0, update to a version outside of this range. For Mendix SAML (Mendix 9.6 compatible, New Track) versions 3.1.9 through 3.2.7, update to a version outside of this range. For Mendix SAML (Mendix 9.6 compatible, Upgrade Track) versions 3.1.8 through 3.2.6, update to a version outside of this range. As a temporary workaround, consider enabling the recommended configuration option Use Encryption to mitigate the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-303

CWE-287

Related Identifiers

BDU:2023-01260

CVE-2023-25957

Affected Products

Mendix Saml

References · 4

• https://bdu.fstec.ru/vul/2023-01260 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-25957 · Security Note
• https://osv.dev/vulnerability/CVE-2023-25957 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-851884.pdf · Note