CVE-2022-45929

2024-06-2000:00:00

mitre

www.cve.org

northern.tech

mender

incorrect access control

privilege escalation

0.0004 Low

EPSS

Percentile

9.1%

JSON

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user.