cisa icsa-25-231-02

This tag covers CISA ICSA-25-231-02, which addresses CVE-2025-40758, a high-severity vulnerability in the Mendix SAML module from Siemens. The flaw allows unauthenticated remote attackers to bypass SAML signature verification and hijack user accounts under certain SSO configurations, with a CVSS score of 8.7. Siemens ProductCERT advisory SSA-395458 details the issue, noting insufficient signature validation and binding checks. The tag is relevant for Windows users and IT administrators managing Mendix deployments, especially those using SAML-based single sign-on, as it provides information on the vulnerability, affected versions, and mitigation steps to prevent account takeover.