CVE-2023-25957
Full vulnerability record from the local CVENow database.
Description
A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible, New Track) (All versions >= V3.1.9 < V3.3.1), Mendix SAML (Mendix 9 latest compatible, Upgrade Track) (All versions >= V3.1.8 < V3.3.0), Mendix SAML (Mendix 9.6 compatible, New Track) (All versions >= V3.1.9 < V3.2.7), Mendix SAML (Mendix 9.6 compatible, Upgrade Track) (All versions >= V3.1.8 < V3.2.6). The affected versions of the module insufficiently verify the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application. For compatibility reasons, fix versions still contain this issue, but only when the recommended, default configuration option `'Use Encryption'` is disabled.
Severity
HIGH
CVSS score
7.5
(v3.1)
Vulnerability status
Modified
Source identifier
Published
2023-03-14 10:15:28.577000
Last modified
2026-10-23 23:10:00.157000
View original CVE JSON
{
"id": "CVE-2023-25957",
"sourceIdentifier": "[email protected]",
"published": "2023-03-14T10:15:28.577",
"lastModified": "2026-10-23T23:10:00.157",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions >= V1.16.4 < V1.17.3), Mendix SAML (Mendix 8 compatible) (All versions >= V2.2.0 < V2.3.0), Mendix SAML (Mendix 9 latest compatible, New Track) (All versions >= V3.1.9 < V3.3.1), Mendix SAML (Mendix 9 latest compatible, Upgrade Track) (All versions >= V3.1.8 < V3.3.0), Mendix SAML (Mendix 9.6 compatible, New Track) (All versions >= V3.1.9 < V3.2.7), Mendix SAML (Mendix 9.6 compatible, Upgrade Track) (All versions >= V3.1.8 < V3.2.6). The affected versions of the module insufficiently verify the SAML assertions. This could allow unauthenticated remote attackers to bypass authentication and get access to the application.\r\n\r\nFor compatibility reasons, fix versions still contain this issue, but only when the recommended, default configuration option `'Use Encryption'` is disabled."
},
{
"lang": "es",
"value": "Se ha identificado una vulnerabilidad en Mendix SAML (compatible con Mendix 7) (Todas las versiones >= V1.16.4 anterior a V1.17.3), Mendix SAML (compatible con Mendix 8) (Todas las versiones >= V2.2.0 anterior a V2.3.0), Mendix SAML (compatible con Mendix 9 más reciente, New Track) (Todas las versiones >= V3.1.9 anterior a V3.3.1), Mendix SAML (compatible con Mendix 9 más reciente, Upgrade Track) (Todas las versiones >= V3.1.8 anterior a V3.3.0), Mendix SAML (compatible con Mendix 9.6, New Track) (Todas las versiones >= V3.1.9 anterior a V3.2.7), Mendix SAML (compatible con Mendix 9.6, Upgrade Track) (Todas las versiones >= V3.1.8 anterior a V3.2.6). Las versiones afectadas del módulo verifican de forma insuficiente las aserciones SAML. Esto podría permitir a atacantes remotos no autenticados eludir la autenticación y obtener acceso a la aplicación.\n\nPor razones de compatibilidad, las versiones de corrección aún contienen este problema, pero solo cuando la opción de configuración predeterminada y recomendada 'Usar Cifrado' está deshabilitada."
}
],
"affected": [
{
"source": "[email protected]",
"affectedData": [
{
"vendor": "Siemens",
"product": "Mendix SAML (Mendix 7 compatible)",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions >= V1.16.4 < V1.17.3",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Mendix SAML (Mendix 8 compatible)",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions >= V2.2.0 < V2.3.0",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Mendix SAML (Mendix 9 latest compatible, New Track)",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions >= V3.1.9 < V3.3.1",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Mendix SAML (Mendix 9 latest compatible, Upgrade Track)",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions >= V3.1.8 < V3.3.0",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Mendix SAML (Mendix 9.6 compatible, New Track)",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions >= V3.1.9 < V3.2.7",
"status": "affected"
}
]
},
{
"vendor": "Siemens",
"product": "Mendix SAML (Mendix 9.6 compatible, Upgrade Track)",
"defaultStatus": "unknown",
"versions": [
{
"version": "All versions >= V3.1.8 < V3.2.6",
"status": "affected"
}
]
}
]
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "[email protected]",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 5.2
},
{
"source": "[email protected]",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"exploitabilityScore": 3.9,
"impactScore": 3.6
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"timestamp": "2025-02-27T15:01:01.659726Z",
"id": "CVE-2023-25957",
"options": [
{
"exploitation": "none"
},
{
"automatable": "yes"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"version": "2.0.3"
}
}
]
},
"weaknesses": [
{
"source": "[email protected]",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-303"
}
]
},
{
"source": "[email protected]",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-287"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:mendix:*:*",
"versionStartIncluding": "1.16.4",
"versionEndExcluding": "1.17.2",
"matchCriteriaId": "E78110E3-955F-480D-B613-1DCFA65C4314"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:mendix:*:*",
"versionStartIncluding": "2.2.0",
"versionEndExcluding": "2.2.3",
"matchCriteriaId": "F19D5A0C-D480-4F6E-B965-E0137F72F6B0"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:mendix:*:*",
"versionStartIncluding": "3.1.9",
"versionEndExcluding": "3.2.5",
"matchCriteriaId": "D99EF1F1-27A1-4032-ACD9-DBBBD3A9733A"
}
]
}
]
}
],
"references": [
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-851884.pdf",
"source": "[email protected]",
"tags": [
"Third Party Advisory"
]
},
{
"url": "https://cert-portal.siemens.com/productcert/pdf/ssa-851884.pdf",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory"
]
}
]
}