description: A vulnerability has been identified in Mendix SAML Module (All versions < V2.1.2). The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges.
problem types: CWE-345: Insufficient Verification of Data Authenticity
affected:
{
product: Mendix SAML Module
vendor: Siemens
versions:
status: affected, version: All versions < V2.1.2
}