Vulnerability-Lookup

CVE-2022-44457 (GCVE-0-2022-44457)

Vulnerability from cvelistv5 – Published: 2022-11-08 00:00 – Updated: 2025-05-01 18:07

Summary

A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions >= V1.17.0 < V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions >= V3.3.1 < V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `'Allow Idp Initiated Authentication'` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration.

Severity

9.8 (Critical)


                        
                          CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: yes Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-05-01 18:07 UTC

CWE

CWE-294 - Authentication Bypass by Capture-replay

Assigner

siemens icscert root

References

1 reference

URL	Tags
https://cert-portal.siemens.com/productcert/pdf/s…

Impacted products

8 products

Vendor	Product	Version	CPE status
Siemens	Mendix SAML (Mendix 7 compatible)	Affected: All versions < V1.17.0	guessed
Siemens	Mendix SAML (Mendix 7 compatible)	Affected: All versions >= V1.17.0 < V1.17.2	guessed
Siemens	Mendix SAML (Mendix 8 compatible)	Affected: All versions < V2.3.0	guessed
Siemens	Mendix SAML (Mendix 8 compatible)	Affected: All versions >= V2.3.0 < V2.3.2	guessed
Siemens	Mendix SAML (Mendix 9 compatible, New Track)	Affected: All versions < V3.3.1	guessed
Siemens	Mendix SAML (Mendix 9 compatible, New Track)	Affected: All versions >= V3.3.1 < V3.3.5	guessed
Siemens	Mendix SAML (Mendix 9 compatible, Upgrade Track)	Affected: All versions < V3.3.0	guessed
Siemens	Mendix SAML (Mendix 9 compatible, Upgrade Track)	Affected: All versions >= V3.3.0 < V3.3.4	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T13:54:03.401Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_transferred"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
          }
        ],
        "title": "CVE Program Container"
      },
      {
        "metrics": [
          {
            "cvssV3_1": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            }
          },
          {
            "other": {
              "content": {
                "id": "CVE-2022-44457",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "yes"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-01T18:07:08.237002Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-05-01T18:07:21.381Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Mendix SAML (Mendix 7 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V1.17.0"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 7 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V1.17.0 \u003c V1.17.2"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 8 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V2.3.0"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 8 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V2.3.0 \u003c V2.3.2"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, New Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3.1"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, New Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V3.3.1 \u003c V3.3.5"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3.0"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V3.3.0 \u003c V3.3.4"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-294",
              "description": "CWE-294: Authentication Bypass by Capture-replay",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-12-13T00:00:00.000Z",
        "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "shortName": "siemens"
      },
      "references": [
        {
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
        }
      ]
    }
  },
  "cveMetadata": {
    "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
    "assignerShortName": "siemens",
    "cveId": "CVE-2022-44457",
    "datePublished": "2022-11-08T00:00:00.000Z",
    "dateReserved": "2022-10-31T00:00:00.000Z",
    "dateUpdated": "2025-05-01T18:07:21.381Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-44457",
      "date": "2026-09-21",
      "epss": "0.00746",
      "percentile": "0.52899"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "FAE0D810-0D2A-4158-B1A1-045743098BA9",
                  "versionEndExcluding": "1.17.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "6C2A31D3-792D-46F1-90C3-818EEE5D1C1B",
                  "versionEndExcluding": "2.3.2",
                  "versionStartIncluding": "2.3.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "083B7407-2BCC-41DC-BF2D-2AC3298A7FAA",
                  "versionEndExcluding": "3.3.4",
                  "versionStartIncluding": "3.3.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
        },
        {
          "lang": "es",
          "value": "Se ha identificado una vulnerabilidad en Mendix SAML (compatible con Mendix 7) (Todas las versiones \u0026lt; V1.17.0),\nMendix SAML (compatible con Mendix 7) (Todas las versiones \u0026gt;= V1.17.0 \u0026lt; V1.17.2), \nMendix SAML (Mendix 8 compatible) (Todas las versiones \u0026lt; V2.3.0), \nMendix SAML (compatible con Mendix 8) (Todas las versiones \u0026gt; V2.3.0 \u0026lt; V2.3.2), \nMendix SAML (compatible con Mendix 9, New Track) (Todas las versiones \u0026lt;  V3.3.1), \nMendix SAML (compatible con Mendix 9, New Track) (todas las versiones \u0026gt;= V3.3.1 \u0026lt; V3.3.5), \nMendix SAML (compatible con Mendix 9, Upgrade Track) (todas las versiones \u0026lt; V3.3.0 ), \nMendix SAML (compatible con Mendix 9, Upgrade Track) (Todas las versiones \u0026gt; V3.3.0  y \u0026lt; V3.3.4). \nLas versiones afectadas del m\u00f3dulo no protegen suficientemente contra la reproducci\u00f3n de captura de paquetes, solo cuando la opci\u00f3n de configuraci\u00f3n no predeterminada y no recomendada \"\"Permitir Autenticaci\u00f3n Iniciada por Idp\"\" est\u00e1 habilitada. Esta entrada de CVE describe la soluci\u00f3n incompleta para CVE-2022-37011 en una configuraci\u00f3n espec\u00edfica no predeterminada."
        }
      ],
      "id": "CVE-2022-44457",
      "lastModified": "2024-11-21T07:28:03.203",
      "metrics": {
        "cvssMetricV31": [
          {
            "cvssData": {
              "attackComplexity": "LOW",
              "attackVector": "NETWORK",
              "availabilityImpact": "HIGH",
              "baseScore": 9.8,
              "baseSeverity": "CRITICAL",
              "confidentialityImpact": "HIGH",
              "integrityImpact": "HIGH",
              "privilegesRequired": "NONE",
              "scope": "UNCHANGED",
              "userInteraction": "NONE",
              "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
              "version": "3.1"
            },
            "exploitabilityScore": 3.9,
            "impactScore": 5.9,
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      },
      "published": "2022-11-08T11:15:12.257",
      "references": [
        {
          "source": "productcert@siemens.com",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Patch",
            "Vendor Advisory"
          ],
          "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
        }
      ],
      "sourceIdentifier": "productcert@siemens.com",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-294"
            }
          ],
          "source": "productcert@siemens.com",
          "type": "Secondary"
        },
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-294"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "product": "Mendix SAML (Mendix 7 compatible)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003c V1.17.0"
                  }
                ]
              },
              {
                "product": "Mendix SAML (Mendix 7 compatible)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003e= V1.17.0 \u003c V1.17.2"
                  }
                ]
              },
              {
                "product": "Mendix SAML (Mendix 8 compatible)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003c V2.3.0"
                  }
                ]
              },
              {
                "product": "Mendix SAML (Mendix 8 compatible)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003e= V2.3.0 \u003c V2.3.2"
                  }
                ]
              },
              {
                "product": "Mendix SAML (Mendix 9 compatible, New Track)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003c V3.3.1"
                  }
                ]
              },
              {
                "product": "Mendix SAML (Mendix 9 compatible, New Track)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003e= V3.3.1 \u003c V3.3.5"
                  }
                ]
              },
              {
                "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003c V3.3.0"
                  }
                ]
              },
              {
                "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
                "vendor": "Siemens",
                "versions": [
                  {
                    "status": "affected",
                    "version": "All versions \u003e= V3.3.0 \u003c V3.3.4"
                  }
                ]
              }
            ],
            "source": "productcert@siemens.com"
          }
        ],
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "FAE0D810-0D2A-4158-B1A1-045743098BA9",
                    "versionEndExcluding": "1.17.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "6C2A31D3-792D-46F1-90C3-818EEE5D1C1B",
                    "versionEndExcluding": "2.3.2",
                    "versionStartIncluding": "2.3.0",
                    "vulnerable": true
                  },
                  {
                    "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "083B7407-2BCC-41DC-BF2D-2AC3298A7FAA",
                    "versionEndExcluding": "3.3.4",
                    "versionStartIncluding": "3.3.0",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
          },
          {
            "lang": "es",
            "value": "Se ha identificado una vulnerabilidad en Mendix SAML (compatible con Mendix 7) (Todas las versiones \u0026lt; V1.17.0),\nMendix SAML (compatible con Mendix 7) (Todas las versiones \u0026gt;= V1.17.0 \u0026lt; V1.17.2), \nMendix SAML (Mendix 8 compatible) (Todas las versiones \u0026lt; V2.3.0), \nMendix SAML (compatible con Mendix 8) (Todas las versiones \u0026gt; V2.3.0 \u0026lt; V2.3.2), \nMendix SAML (compatible con Mendix 9, New Track) (Todas las versiones \u0026lt;  V3.3.1), \nMendix SAML (compatible con Mendix 9, New Track) (todas las versiones \u0026gt;= V3.3.1 \u0026lt; V3.3.5), \nMendix SAML (compatible con Mendix 9, Upgrade Track) (todas las versiones \u0026lt; V3.3.0 ), \nMendix SAML (compatible con Mendix 9, Upgrade Track) (Todas las versiones \u0026gt; V3.3.0  y \u0026lt; V3.3.4). \nLas versiones afectadas del m\u00f3dulo no protegen suficientemente contra la reproducci\u00f3n de captura de paquetes, solo cuando la opci\u00f3n de configuraci\u00f3n no predeterminada y no recomendada \"\"Permitir Autenticaci\u00f3n Iniciada por Idp\"\" est\u00e1 habilitada. Esta entrada de CVE describe la soluci\u00f3n incompleta para CVE-2022-37011 en una configuraci\u00f3n espec\u00edfica no predeterminada."
          }
        ],
        "id": "CVE-2022-44457",
        "lastModified": "2026-06-17T05:08:24.010",
        "metrics": {
          "cvssMetricV31": [
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "nvd@nist.gov",
              "type": "Primary"
            },
            {
              "cvssData": {
                "attackComplexity": "LOW",
                "attackVector": "NETWORK",
                "availabilityImpact": "HIGH",
                "baseScore": 9.8,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "exploitabilityScore": 3.9,
              "impactScore": 5.9,
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "type": "Secondary"
            }
          ],
          "ssvcV203": [
            {
              "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "ssvcData": {
                "id": "CVE-2022-44457",
                "options": [
                  {
                    "exploitation": "none"
                  },
                  {
                    "automatable": "yes"
                  },
                  {
                    "technicalImpact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-05-01T18:07:08.237002Z",
                "version": "2.0.3"
              }
            }
          ]
        },
        "published": "2022-11-08T11:15:12.257",
        "references": [
          {
            "source": "productcert@siemens.com",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Patch",
              "Vendor Advisory"
            ],
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
          }
        ],
        "sourceIdentifier": "productcert@siemens.com",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-294"
              }
            ],
            "source": "productcert@siemens.com",
            "type": "Secondary"
          },
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-294"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    },
    "redhat_vex": {
      "current_release_date": "2025-05-29T01:45:28+00:00",
      "cve": "CVE-2022-44457",
      "id": "CVE-2022-44457",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2022-44457",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-44457.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-03T13:54:03.401Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "cvssV3_1": {
                  "attackComplexity": "LOW",
                  "attackVector": "NETWORK",
                  "availabilityImpact": "HIGH",
                  "baseScore": 9.8,
                  "baseSeverity": "CRITICAL",
                  "confidentialityImpact": "HIGH",
                  "integrityImpact": "HIGH",
                  "privilegesRequired": "NONE",
                  "scope": "UNCHANGED",
                  "userInteraction": "NONE",
                  "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
                  "version": "3.1"
                }
              },
              {
                "other": {
                  "content": {
                    "id": "CVE-2022-44457",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "total"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2025-05-01T18:07:08.237002Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-05-01T18:07:17.510Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "product": "Mendix SAML (Mendix 7 compatible)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003c V1.17.0"
                }
              ]
            },
            {
              "product": "Mendix SAML (Mendix 7 compatible)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003e= V1.17.0 \u003c V1.17.2"
                }
              ]
            },
            {
              "product": "Mendix SAML (Mendix 8 compatible)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003c V2.3.0"
                }
              ]
            },
            {
              "product": "Mendix SAML (Mendix 8 compatible)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003e= V2.3.0 \u003c V2.3.2"
                }
              ]
            },
            {
              "product": "Mendix SAML (Mendix 9 compatible, New Track)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003c V3.3.1"
                }
              ]
            },
            {
              "product": "Mendix SAML (Mendix 9 compatible, New Track)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003e= V3.3.1 \u003c V3.3.5"
                }
              ]
            },
            {
              "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003c V3.3.0"
                }
              ]
            },
            {
              "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
              "vendor": "Siemens",
              "versions": [
                {
                  "status": "affected",
                  "version": "All versions \u003e= V3.3.0 \u003c V3.3.4"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-294",
                  "description": "CWE-294: Authentication Bypass by Capture-replay",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2022-12-13T00:00:00.000Z",
            "orgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
            "shortName": "siemens"
          },
          "references": [
            {
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
            }
          ]
        }
      },
      "cveMetadata": {
        "assignerOrgId": "cec7a2ec-15b4-4faf-bd53-b40f371f3a77",
        "assignerShortName": "siemens",
        "cveId": "CVE-2022-44457",
        "datePublished": "2022-11-08T00:00:00.000Z",
        "dateReserved": "2022-10-31T00:00:00.000Z",
        "dateUpdated": "2025-05-01T18:07:21.381Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}

CNVD-2022-75534

Vulnerability from cnvd - Published: 2022-11-09

Title

Siemens Mendix SAML Module认证绕过漏洞

Description

Siemens Mendix SAML Module是德国西门子（Siemens）公司的一个应用程序模块。用于根据最终用户在您的身份提供者中的身份授予对 Mendix 应用程序的访问权限。 Siemens Mendix SAML Module存在认证绕过漏洞，攻击者可利用该漏洞绕过身份验证并访问应用程序。

Severity

高

Patch Name

Siemens Mendix SAML Module认证绕过漏洞的补丁

Patch Description

Siemens Mendix SAML Module是德国西门子（Siemens）公司的一个应用程序模块。用于根据最终用户在您的身份提供者中的身份授予对 Mendix 应用程序的访问权限。 Siemens Mendix SAML Module存在认证绕过漏洞，攻击者可利用该漏洞绕过身份验证并访问应用程序。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://cert-portal.siemens.com/productcert/html/ssa-638652.html

Reference

https://cert-portal.siemens.com/productcert/html/ssa-638652.html

Impacted products

Name
['Siemens Mendix SAML Module (Mendix 7 compatible) >=1.17.0', 'Siemens Mendix SAML Module (Mendix 8 compatible) >=2.3.0，<2.3.2', 'Siemens Mendix SAML Module (Mendix 9 compatible, New Track) >=3.3.1，<3.3.5', 'Siemens Mendix SAML Module (Mendix 9 compatible, Upgrade Track) >=3.3.0，<3.3.4']

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2022-44457"
    }
  },
  "description": "Siemens Mendix SAML Module\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u5e94\u7528\u7a0b\u5e8f\u6a21\u5757\u3002\u7528\u4e8e\u6839\u636e\u6700\u7ec8\u7528\u6237\u5728\u60a8\u7684\u8eab\u4efd\u63d0\u4f9b\u8005\u4e2d\u7684\u8eab\u4efd\u6388\u4e88\u5bf9 Mendix \u5e94\u7528\u7a0b\u5e8f\u7684\u8bbf\u95ee\u6743\u9650\u3002\n\nSiemens Mendix SAML Module\u5b58\u5728\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u5e76\u8bbf\u95ee\u5e94\u7528\u7a0b\u5e8f\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://cert-portal.siemens.com/productcert/html/ssa-638652.html",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2022-75534",
  "openTime": "2022-11-09",
  "patchDescription": "Siemens Mendix SAML Module\u662f\u5fb7\u56fd\u897f\u95e8\u5b50\uff08Siemens\uff09\u516c\u53f8\u7684\u4e00\u4e2a\u5e94\u7528\u7a0b\u5e8f\u6a21\u5757\u3002\u7528\u4e8e\u6839\u636e\u6700\u7ec8\u7528\u6237\u5728\u60a8\u7684\u8eab\u4efd\u63d0\u4f9b\u8005\u4e2d\u7684\u8eab\u4efd\u6388\u4e88\u5bf9 Mendix \u5e94\u7528\u7a0b\u5e8f\u7684\u8bbf\u95ee\u6743\u9650\u3002\r\n\r\nSiemens Mendix SAML Module\u5b58\u5728\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u7ed5\u8fc7\u8eab\u4efd\u9a8c\u8bc1\u5e76\u8bbf\u95ee\u5e94\u7528\u7a0b\u5e8f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Siemens Mendix SAML Module\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Siemens Mendix SAML Module (Mendix 7 compatible) \u003e=1.17.0",
      "Siemens Mendix SAML Module (Mendix 8 compatible) \u003e=2.3.0\uff0c\u003c2.3.2",
      "Siemens Mendix SAML Module (Mendix 9 compatible, New Track) \u003e=3.3.1\uff0c\u003c3.3.5",
      "Siemens Mendix SAML Module (Mendix 9 compatible, Upgrade Track) \u003e=3.3.0\uff0c\u003c3.3.4"
    ]
  },
  "referenceLink": "https://cert-portal.siemens.com/productcert/html/ssa-638652.html",
  "serverity": "\u9ad8",
  "submitTime": "2022-11-09",
  "title": "Siemens Mendix SAML Module\u8ba4\u8bc1\u7ed5\u8fc7\u6f0f\u6d1e"
}

FKIE_CVE-2022-44457

Vulnerability from fkie_nvd - Published: 2022-11-08 11:15 - Updated: 2026-06-17 05:08

Severity

9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Summary

References

	URL	Tags
	productcert@siemens.com	https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf	Patch, Vendor Advisory
	af854a3a-2127-422b-91ae-364da2661108	https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
mendix	saml	*
mendix	saml	*
mendix	saml	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "Mendix SAML (Mendix 7 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V1.17.0"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 7 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V1.17.0 \u003c V1.17.2"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 8 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V2.3.0"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 8 compatible)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V2.3.0 \u003c V2.3.2"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, New Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3.1"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, New Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V3.3.1 \u003c V3.3.5"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003c V3.3.0"
            }
          ]
        },
        {
          "product": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
          "vendor": "Siemens",
          "versions": [
            {
              "status": "affected",
              "version": "All versions \u003e= V3.3.0 \u003c V3.3.4"
            }
          ]
        }
      ],
      "source": "productcert@siemens.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAE0D810-0D2A-4158-B1A1-045743098BA9",
              "versionEndExcluding": "1.17.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6C2A31D3-792D-46F1-90C3-818EEE5D1C1B",
              "versionEndExcluding": "2.3.2",
              "versionStartIncluding": "2.3.0",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "083B7407-2BCC-41DC-BF2D-2AC3298A7FAA",
              "versionEndExcluding": "3.3.4",
              "versionStartIncluding": "3.3.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
    },
    {
      "lang": "es",
      "value": "Se ha identificado una vulnerabilidad en Mendix SAML (compatible con Mendix 7) (Todas las versiones \u0026lt; V1.17.0),\nMendix SAML (compatible con Mendix 7) (Todas las versiones \u0026gt;= V1.17.0 \u0026lt; V1.17.2), \nMendix SAML (Mendix 8 compatible) (Todas las versiones \u0026lt; V2.3.0), \nMendix SAML (compatible con Mendix 8) (Todas las versiones \u0026gt; V2.3.0 \u0026lt; V2.3.2), \nMendix SAML (compatible con Mendix 9, New Track) (Todas las versiones \u0026lt;  V3.3.1), \nMendix SAML (compatible con Mendix 9, New Track) (todas las versiones \u0026gt;= V3.3.1 \u0026lt; V3.3.5), \nMendix SAML (compatible con Mendix 9, Upgrade Track) (todas las versiones \u0026lt; V3.3.0 ), \nMendix SAML (compatible con Mendix 9, Upgrade Track) (Todas las versiones \u0026gt; V3.3.0  y \u0026lt; V3.3.4). \nLas versiones afectadas del m\u00f3dulo no protegen suficientemente contra la reproducci\u00f3n de captura de paquetes, solo cuando la opci\u00f3n de configuraci\u00f3n no predeterminada y no recomendada \"\"Permitir Autenticaci\u00f3n Iniciada por Idp\"\" est\u00e1 habilitada. Esta entrada de CVE describe la soluci\u00f3n incompleta para CVE-2022-37011 en una configuraci\u00f3n espec\u00edfica no predeterminada."
    }
  ],
  "id": "CVE-2022-44457",
  "lastModified": "2026-06-17T05:08:24.010",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2022-44457",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-05-01T18:07:08.237002Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2022-11-08T11:15:12.257",
  "references": [
    {
      "source": "productcert@siemens.com",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
    }
  ],
  "sourceIdentifier": "productcert@siemens.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-294"
        }
      ],
      "source": "productcert@siemens.com",
      "type": "Secondary"
    },
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-294"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-R796-QQQW-VXRJ

Vulnerability from github – Published: 2022-11-08 12:00 – Updated: 2022-11-09 19:02

Details

A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions < V1.17.0), Mendix SAML Module (Mendix 7 compatible) (All versions >= V1.17.0), Mendix SAML Module (Mendix 8 compatible) (All versions < V2.3.0), Mendix SAML Module (Mendix 8 compatible) (All versions >= V2.3.0 < V2.3.2), Mendix SAML Module (Mendix 9 compatible, New Track) (All versions < V3.3.1), Mendix SAML Module (Mendix 9 compatible, New Track) (All versions >= V3.3.1 < V3.3.5), Mendix SAML Module (Mendix 9 compatible, Upgrade Track) (All versions < V3.3.0), Mendix SAML Module (Mendix 9 compatible, Upgrade Track) (All versions >= V3.3.0 < V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option 'Allow Idp Initiated Authentication' is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration.

Severity

9.8 (Critical)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2022-44457"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-294"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2022-11-08T11:15:00Z",
    "severity": "CRITICAL"
  },
  "details": "A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML Module (Mendix 7 compatible) (All versions \u003e= V1.17.0), Mendix SAML Module (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML Module (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML Module (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML Module (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML Module (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML Module (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration.",
  "id": "GHSA-r796-qqqw-vxrj",
  "modified": "2022-11-09T19:02:23Z",
  "published": "2022-11-08T12:00:17Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2022-44457"
    },
    {
      "type": "WEB",
      "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

GSD-2022-44457

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2022-44457

Aliases

CVE-2022-44457

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2022-44457",
    "description": "A vulnerability has been identified in Mendix SAML Module (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML Module (Mendix 7 compatible) (All versions \u003e= V1.17.0), Mendix SAML Module (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML Module (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML Module (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML Module (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML Module (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML Module (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration.",
    "id": "GSD-2022-44457"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2022-44457"
      ],
      "details": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration.",
      "id": "GSD-2022-44457",
      "modified": "2023-12-13T01:19:25.332751Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "productcert@siemens.com",
        "ID": "CVE-2022-44457",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "Mendix SAML (Mendix 7 compatible)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V1.17.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix SAML (Mendix 7 compatible)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003e= V1.17.0 \u003c V1.17.2"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix SAML (Mendix 8 compatible)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V2.3.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix SAML (Mendix 8 compatible)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003e= V2.3.0 \u003c V2.3.2"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix SAML (Mendix 9 compatible, New Track)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3.1"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix SAML (Mendix 9 compatible, New Track)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003e= V3.3.1 \u003c V3.3.5"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003c V3.3.0"
                        }
                      ]
                    }
                  },
                  {
                    "product_name": "Mendix SAML (Mendix 9 compatible, Upgrade Track)",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "All versions \u003e= V3.3.0 \u003c V3.3.4"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "Siemens"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "CWE-294: Authentication Bypass by Capture-replay"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf",
            "refsource": "MISC",
            "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "1.17.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "2.3.2",
                "versionStartIncluding": "2.3.0",
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:mendix:saml:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndExcluding": "3.3.4",
                "versionStartIncluding": "3.3.0",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "productcert@siemens.com",
          "ID": "CVE-2022-44457"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "A vulnerability has been identified in Mendix SAML (Mendix 7 compatible) (All versions \u003c V1.17.0), Mendix SAML (Mendix 7 compatible) (All versions \u003e= V1.17.0 \u003c V1.17.2), Mendix SAML (Mendix 8 compatible) (All versions \u003c V2.3.0), Mendix SAML (Mendix 8 compatible) (All versions \u003e= V2.3.0 \u003c V2.3.2), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003c V3.3.1), Mendix SAML (Mendix 9 compatible, New Track) (All versions \u003e= V3.3.1 \u003c V3.3.5), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003c V3.3.0), Mendix SAML (Mendix 9 compatible, Upgrade Track) (All versions \u003e= V3.3.0 \u003c V3.3.4). Affected versions of the module insufficiently protect from packet capture replay, only when the not recommended, non default configuration option `\u0027Allow Idp Initiated Authentication\u0027` is enabled. This CVE entry describes the incomplete fix for CVE-2022-37011 in a specific non default configuration."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-294"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://cert-portal.siemens.com/productcert/pdf/ssa-638652.pdf"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV3": {
          "cvssV3": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.8,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "exploitabilityScore": 3.9,
          "impactScore": 5.9
        }
      },
      "lastModifiedDate": "2022-12-13T17:15Z",
      "publishedDate": "2022-11-08T11:15Z"
    }
  }
}

ICSA-22-258-04

Vulnerability from csaf_cisa - Published: 2022-09-13 00:00 - Updated: 2022-12-13 00:00

Summary

Siemens Mendix SAML Module

Scope

2 vulnerabilities in this advisory, including CVE-2022-44457.

CVE-2022-44457

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C

Known affected: 8 products

https://marketplace.mendix.com/link/component/1174/

Open the full advisory

SSA-638652

Vulnerability from csaf_siemens - Published: 2022-09-13 00:00 - Updated: 2022-12-13 00:00

Summary

SSA-638652: Authentication Bypass Vulnerability in Mendix SAML Module

Scope

2 vulnerabilities in this advisory, including CVE-2022-44457.

CVE-2022-44457

7.4 (High)


                
                  CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N/E:P/RL:O/RC:C

Known affected: 8 products

https://marketplace.mendix.com/link/component/1174/

Open the full advisory

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2022-44457 (GCVE-0-2022-44457)

CNVD-2022-75534

FKIE_CVE-2022-44457

GHSA-R796-QQQW-VXRJ

GSD-2022-44457

ICSA-22-258-04

SSA-638652

Tags

Sightings

Nomenclature

Related by attack behaviour