CVE-2024-55959

Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions...

CVE-2024-55959

CVE-2024-55959 affects Northern.tech Mender Client 4.x prior to 4.0.5. The root cause is insecure permissions on a private key file, enabling unauthorized access and leading to potential confidentiality and integrity impacts. The CVSS v3.1 score is 9.1 (CRITICAL) with network attack vector, no us...

PT-2025-3165 · Northern.Tech · Mender Client

Name of the Vulnerable Software and Affected Versions: Northern.tech Mender Client versions 4.0.0 through 4.0.4 Description: The issue is related to insecure permissions in the Northern.tech Mender Client. Recommendations: For Northern.tech Mender Client versions 4.0.0 through 4.0.4, update to...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-47190

Northern.tech Hosted Mender before 2024.07.11 allows SSRF...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

CVE-2024-46947

CVE-2024-46947 (and related CVE-2024-47190) describe a server-side request forgery (SSRF) vulnerability in Northern.tech Mender. Affected products include: Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7, and Northern.tech Hosted Mender before 2024.07.11. The root cause is an SSRF flaw a...

Northern.tech Mender 安全漏洞

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. It is suitable for connected devices of any size. A security vulnerability exists in Northern.tech Mender versions prior to 3.6.5 and 3.7.x prior to 3.7.5 that stems from the presence of faulty access...

Northern.tech Mender 安全漏洞

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. It is suitable for connected devices of any size. A security vulnerability exists in versions of Northern.tech Mender prior to 2024.07.11 that stems from the presence of a server-side request forgery...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

CVE-2024-47190

CVE-2024-47190 affects Northern.tech Hosted Mender prior to 2024.07.11 and is an SSRF vulnerability. The available connected documents consistently describe SSRF as the issue in hosted Mender, with Red Hat and NVD entries mirroring the same scope. There are no details in these sources about explo...

Northern.tech Mender 安全漏洞

Northern.tech Mender is a secure and reliable remote update solution from Northern.tech, Inc. It is suitable for connected devices of any size. A security vulnerability exists in Northern.tech Mender versions prior to 3.6.6 and 3.7.x prior to 3.7.7 that stems from the presence of a server-side...

CVE-2024-46947

Northern.tech Mender before 3.6.6 and 3.7.x before 3.7.7 allows SSRF...

CVE-2024-47190

Northern.tech Hosted Mender before 2024.07.11 allows SSRF...

CVE-2024-46948

Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control...

CVE-2024-47190

Northern.tech Hosted Mender before 2024.07.11 allows SSRF...

CVE-2024-46948

CVE-2024-46948 affects Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5, due to an Incorrect Access Control flaw. The vulnerability permits access control bypass (specifics not detailed in the provided documents). Affected components/versions are clearly stated; remediation is to upgrade ...

CVE-2022-41324

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information...