← CVE Intelligence

CVE-2024-39888

Siemens / Mendix Encryption PUBLISHED

Description (CNA)

A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the module define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified. This could allow to an attacker to decrypt any encrypted project data, as the default encryption key can be considered compromised.

Affected (CNA)

Vendor / productVersions
Siemens / Mendix Encryptionaffected V10.0.0 before V10.0.2

CWE

CWE-547

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.