92 matches found
CVE-2021-44215
Northern.tech CFEngine Enterprise 3.15.4 before 3.15.5 has Insecure Permissions that may allow unauthorized local users to have an unspecified impact...
CVE-2021-44215
CVE-2021-44215 and CVE-2021-44216 affect Northern.tech CFEngine Enterprise. CVE-2021-44215: CFEngine Enterprise 3.15.4 before 3.15.5 has insecure file permissions that may allow unauthorized local users to have an unspecified impact. CVE-2021-44216: CFEngine Enterprise versions before 3.15.5 and ...
CVE-2021-44216
CVE-2021-44216 affects Northern.tech CFEngine Enterprise: before 3.15.5 and, for 3.18.x, before 3.18.1, there are insecure permissions that may allow unauthorized local users to access the Apache and Mission Portal log files. Upgrading to CFEngine Enterprise 3.15.5 or 3.18.1 (or newer) is the doc...
Northern.tech CFEngine 信任管理问题漏洞
Northern.tech CfEngine is an open source configuration management solution from Northern.tech, Inc. It is used to securely manage It infrastructure. A security vulnerability exists in Northern.tech CFEngine Enterprise versions 3.15.0 through 3.15.4 that stems from the program's lack of SSL...
CVE-2021-35342
The useradm service 1.14.0 in Northern.tech Mender Enterprise 2.7.x before 2.7.1 and 1.13.0 in Northern.tech Mender Enterprise 2.6.x before 2.6.1 allows users to access the system with their JWT token after logout, because of missing invalidation if the JWT verification cache is enabled...
CVE-2019-19394
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
Code injection
Northern.tech CFEngine Enterprise before 3.10.7, 3.11.x and 3.12.x before 3.12.3, 3.13.x, and 3.14.x allows XSS. This is fixed in 3.10.7, 3.12.3, and 3.15.0...
CVE-2019-9929
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
CVE-2019-9929
Northern.tech CFEngine Enterprise 3.12.1 has Insecure Permissions...
CVE-2019-9929
CVE-2019-9929 concerns Northern.tech CFEngine Enterprise 3.12.1 with insecure permissions. The connected sources consistently describe the issue as an insecure-permissions vulnerability for CFEngine Enterprise 3.12.1. The available documentation does not specify the exact vulnerable file, compone...
