CVE-2024-47190

Northern.tech Hosted Mender versions prior to 2024.07.11 are vulnerable to a Server-Side Request Forgery (SSRF) . The vulnerability allows an attacker to induce the server to make unintended requests. While specific exploit links are not provided in the documents, the issue has been observed in t...

CVE-2024-46947

Northern.tech Mender is vulnerable to Server-Side Request Forgery (SSRF) in versions prior to 3.6.6 and versions 3.7.x before 3.7.7 . Exploitation of this vulnerability could allow an attacker to coerce the server into making unauthorized requests. Specific technical details regarding the root ca...

CVE-2022-41324

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...

CVE-2022-45929

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...

Northern.tech Mender security breach

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. for connected devices of any size. A security vulnerability exists in Northern.tech Mender that stems from the presence of faulty access control, resulting in an attacker privilege that can be escalated...

CVE-2022-41324

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...

PT-2024-11728 · Northern.Tech · Mender

Name of the Vulnerable Software and Affected Versions: Northern.tech Mender versions 3.3.x through 3.3.1 Northern.tech Mender versions 3.4.x through 3.4.0 Northern.tech Mender versions 3.5.x through 3.5.0 Northern.tech Mender versions 3.6.x through 3.6.0 Description: The issue is related to...

CVE-2022-41324

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...

CVE-2022-45929

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...

Northern.tech Mender security breach

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. for connected devices of any size. A security vulnerability exists in Northern.tech Mender versions 3.3.x prior to 3.3.2, and 3.4.x prior to 3.4.0, which stems from having incorrect access control, which...

CVE-2022-41324

Northern.tech Mender is affected by an Incorrect Access Control vulnerability. This flaw allows low-privileged, read-only users to default to having read access to sensitive device information. Additionally, certain documents indicate that the vulnerability may allow users to change their roles, ...

CVE-2022-45929

Northern.tech Mender versions 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 are vulnerable to Incorrect Access Control . This flaw allows a low-privileged read-only user to change their role, potentially leading to privilege escalation to a high-privileged user. Additionally, low...

CVE-2022-45929

Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

CVE-2024-37019

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication...

PT-2024-27247 · Unknown · Mender Enterprise

Name of the Vulnerable Software and Affected Versions: Mender Enterprise versions 3.6.4 and earlier Mender Enterprise versions 3.7.x before 3.7.4 Description: The issue is related to weak authentication in Mender Enterprise. Recommendations: For Mender Enterprise versions 3.6.4 and earlier, updat...

CVE-2022-32290

The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...

CVE-2022-32290

The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...

CVE-2022-32290

The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and exposes an HTTP proxy to facilitate API calls from additional client components running on the device. However, it listens on all network interfaces instead o...