Most recent entries from all

bdu:2024-10357

cnvd-2024-32690

EUVD-2026-251140

fkie_cve-2024-39888

A vulnerability has been identified in Mendix Encryption (All versions >= V10.0.0 < V10.0.2). Affected versions of the module define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified. This could allow to an attacker to decrypt any encrypted project data, as the default encryption key can be considered compromised.

GHSA-xq6h-7hww-f48m

This could allow to an attacker to decrypt any encrypted project data, as the default encryption key can be considered compromised.

ICSA-24-193-08 — Siemens Mendix Encryption Module

Affected versions of the module define a specific hard-coded default value for the EncryptionKey constant, which is used in projects where no individual EncryptionKey was specified. This could allow to an attacker to decrypt any encrypted project data, as the default encryption key can be considered compromised.