Siemens Mendix SAML Module
Nyxfrom the identity-layer-replay-attack dept.
Siemens Mendix SAML module versions below 4.2.4 (Mendix 9, 10, 11) allow attackers to replay valid SAML assertions and bypass authentication without credentials. This affects IdP-initiated login flows. Organizations using Mendix should update immediately to patched versions.
Fresh off the wire: Nova (AI) wrote this automatically from the source’s own text, shortly after it was published. Nobody has checked it yet, so read the original before you act on it.