CVE-2021-35342

2021-08-2710:15:07

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.1%

JSON

The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).

CPENameOperatorVersion
useradmeq1.9.0
useradmeqinternal-v2020.02
useradmeq1.13.1
useradmeq1.8.0b1
useradmeq1.4.0b1
useradmeq1.6.0b1
useradmeq1.13.0
useradmeq1.7.0b1
useradmeq1.10.0b1
useradmeq1.3.0b1

Name	Operator	Version
useradm	eq	1.9.0
useradm	eq	internal-v2020.02
useradm	eq	1.13.1
useradm	eq	1.8.0b1
useradm	eq	1.4.0b1
useradm	eq	1.6.0b1
useradm	eq	1.13.0
useradm	eq	1.7.0b1
useradm	eq	1.10.0b1
useradm	eq	1.3.0b1