Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87974
HistoryDec 14, 2022 - 12:00 a.m.

Siemens Mendix Email Connector Module Improper Access Control Vulnerability

2022-12-1400:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
siemens mendix
email connector module
improper access control
vulnerability
sending
receiving emails
security
remote attacker
sensitive information

EPSS

0.001

Percentile

45.8%

Siemens Mendix Email Connector Module allows email to be sent and received on its own email server and adds new features such as sending signed and encrypted emails.A security vulnerability exists in Siemens Mendix Email Connector Module due to a version of the affected module that fails to properly handle access control for certain module entities. The vulnerability allows an authenticated, remote attacker to read and manipulate sensitive information.

EPSS

0.001

Percentile

45.8%

Related for CNVD-2022-87974