Siemens discloses authentication bypass in Mendix SAML module via SAML assertion replay
- Status
- Confirmed
- Kind
- Vulnerability
- Vendor
- Siemens
- Product
- Mendix SAML Module
- First seen
- Confirmed
Summary
Siemens reports that the Mendix SAML module contains an authentication bypass that lets an unauthenticated remote attacker gain access by replaying a valid SAML assertion in IdP-initiated flows. CISA's advisory lists CVSS v3 6.8 and names fixed versions 4.2.4 for Mendix 10 and 11 and 3.6.29 for Mendix 9.
If you use Siemens
Update the Mendix SAML module to 4.2.4 (Mendix 10/11) or 3.6.29 (Mendix 9).
Review the CISA advisory icsa-26-302-01 to confirm your versions are affected.
Check authentication logs for suspicious SAML logins.
What the sources say 1
· CISA advisories: “Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated authentication flows.” Source