LDAP Injection Vulnerability in Mendix LDAP Module

An attacker could bypass username verification in LDAP authentication systems, potentially gaining unauthorized access to applications that rely on the Mendix LDAP module for user verification. This could compromise access control to critical operational applications.

Organizations using Mendix applications with the LDAP authentication module for access control. This includes utility operators using LDAP-based systems for SCADA/HMI authentication, asset management platforms, or engineering workstation access control systems that depend on the Mendix LDAP module.

An attacker sends a specially crafted LDAP query through the username field that exploits LDAP injection logic flaws in the Mendix LDAP module. This allows bypassing the username verification check without valid credentials, gaining unauthorized access to the application.