Read the docs
TI-2023-24556 Aliases CVE-2023-45794GHSA-c2cf-rfw6-458v

Authentication bypass by capture-replay in Siemens Mendix Applications using Mendix 10

Priority LOW 38CWE-294Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-294.

Summary

A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.4.0), Mendix Applications using Mendix 7 (All versions < V7.23.37), Mendix Applications using Mendix 8 (All versions < V8.18.27), Mendix Applications using Mendix 9 (All versions < V9.24.10). A capture-replay flaw in the platform could have an impact to apps built with the platform, if certain preconditions are met that depend on the app's model and access control design. This could allow authenticated attackers to access or modify objects without proper authorization, or escalate privileges in the context of the vulnerable app.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0044 38th percentileScored 2026-11-07
Fix Fixed Mendix Applications using Mendix 10 (Siemens): V10.4.0Mendix Applications using Mendix 7 (Siemens): V7.23.37+2 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
SiemensMendix Applications using Mendix 10before V10.4.0V10.4.0Patch availableCNA
SiemensMendix Applications using Mendix 7before V7.23.37V7.23.37Patch availableCNA
SiemensMendix Applications using Mendix 8before V8.18.27V8.18.27Patch availableCNA
SiemensMendix Applications using Mendix 9before V9.24.10V9.24.10Patch availableCNA
  • Mendix Applications using Mendix 10 VendorSiemens Affected before V10.4.0 Fixed in V10.4.0 Patch available CNA
  • Mendix Applications using Mendix 7 VendorSiemens Affected before V7.23.37 Fixed in V7.23.37 Patch available CNA
  • Mendix Applications using Mendix 8 VendorSiemens Affected before V8.18.27 Fixed in V8.18.27 Patch available CNA
  • Mendix Applications using Mendix 9 VendorSiemens Affected before V9.24.10 Fixed in V9.24.10 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:siemens:mendix:*:*:*:*:*:*:*:*7.0.0 to before 7.23.37; 8.0.0 to before 8.18.27; 9.0.0 to before 9.24.10; 10.0.0 to before 10.4.0VulnerableSiemens
  • cpe:2.3:a:siemens:mendix:*:*:*:*:*:*:*:* Versions 7.0.0 to before 7.23.37; 8.0.0 to before 8.18.27; 9.0.0 to before 9.24.10; 10.0.0 to before 10.4.0 Vulnerable ·Siemens

Remediation

  • Fix · CNA Mendix Applications using Mendix 10 (Siemens) Fixed in V10.4.0
  • Fix · CNA Mendix Applications using Mendix 7 (Siemens) Fixed in V7.23.37
  • Fix · CNA Mendix Applications using Mendix 8 (Siemens) Fixed in V8.18.27
  • Fix · CNA Mendix Applications using Mendix 9 (Siemens) Fixed in V9.24.10

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-45794
  2. 2026-10-03 Alias added: GHSA-c2cf-rfw6-458v

References

Advisory 1

  • TI-2021-19919 Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints KEVCVSS 3.1CRITICAL 10.0
  • TI-2021-20393 Apache Log4j2 Thread Context Message Pattern and Context Lookup Pattern vulnerable to a denial of service attack KEVCVSS 3.1CRITICAL 9.0
  • TI-2021-13092 Incorrect authorization in Siemens Mendix Applications using Mendix 7 CVSS 3.1MEDIUM 5.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences