1. Home
  2. CVE Database
  3. CVE-2021-42026
MEDIUM · 4.3

CVE-2021-42026

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versio...

Vulnerability Description

A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versions of Mendix Studio Pro do not properly control read access for certain client actions. This could allow authenticated attackers to retrieve the changedDate attribute of arbitrary objects, even when they don't have read access to them.

CVSS Score

4.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
MendixMendix>= 8.0.0, < 8.18.13

Related Weaknesses (CWE)

CWE-863

References

FAQ

What is CVE-2021-42026?

CVE-2021-42026 is a vulnerability with a CVSS score of 4.3 (MEDIUM). A vulnerability has been identified in Mendix Applications using Mendix 8 (All versions < V8.18.13), Mendix Applications using Mendix 9 (All versions < V9.6.2). Applications built with affected versio...

How severe is CVE-2021-42026?

CVE-2021-42026 has been rated MEDIUM with a CVSS base score of 4.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-42026?

Check the references section above for vendor advisories and patch information. Affected products include: Mendix Mendix.