Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
A vulnerability has been identified in Mendix Applications using Mendix 10 (All versions < V10.11.0), Mendix Applications using Mendix 10 (V10.6) (All versions < V10.6.9), Mendix Applications using Mendix 9 (All versions >= V9.3.0 < V9.24.22). Affected applications could allow users with the capability to manage a role to elevate the access rights of users with that role. Successful exploitation requires to guess the id of a target role which contains the elevated access rights.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:N
Vulnerability Type
特权管理不恰当
Vulnerability Title
多款Siemens产品 安全漏洞
Vulnerability Description
Siemens Mendix是德国西门子（Siemens）公司的一套低代码应用程序开发平台。该平台提供应用程序开发、测试、部署和迭代等功能。 多款Siemens产品存在安全漏洞，该漏洞源于受影响的应用程序可能允许具有管理角色权限的用户提升具有该角色的用户的访问权限，以下产品和版本受到影响：Mendix10 V10.11.0之前版本、 Mendix 10 V10.6.9之前版本、 Mendix 9 V9.3.0 到 V9.24.22版本。
CVSS Information
N/A
Vulnerability Type
N/A