VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 13, 2022· Updated Apr 21, 2025

CVE-2022-46664

CVE-2022-46664

Description

A vulnerability has been identified in Mendix Workflow Commons (All versions < V2.4.0), Mendix Workflow Commons V2.1 (All versions < V2.1.4), Mendix Workflow Commons V2.3 (All versions < V2.3.2). Affected versions of the module improperly handle access control for some module entities.

This could allow authenticated remote attackers to read or delete sensitive information.

Affected products

4
  • Siemens Foundation/Mendix Workflow Commonsllm-create4 versions
    <2.4.0+ 3 more
    • (no CPE)range: <2.4.0
    • (no CPE)range: All versions < V2.4.0
    • (no CPE)range: All versions < V2.1.4
    • (no CPE)range: All versions < V2.3.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.