High severity7.5NVD Advisory· Published Jul 9, 2024· Updated Apr 15, 2026
CVE-2024-39888
CVE-2024-39888
Description
A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the module define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified.
This could allow to an attacker to decrypt any encrypted project data, as the default encryption key can be considered compromised.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: >= V10.0.0 < V10.0.2
Patches
Vulnerability mechanics
References
1News mentions
0No linked articles in our index yet.