CVE-2022-41324 - Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information

Back Back to CVE browser

MEDIUM

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information

Published Jun 20, 2024

6.5

MEDIUM

CVSS 3.1

EPSS 0.32%

Description

Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44531		Advisory
https://mender.io/blog/cve-2022-45929-cve-2022-41324-improper-access-control-for-low-privileged-users
https://northern.tech

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 20, 2024

Updated Mar 14, 2025

Reserved Sep 23, 2022

Link CVE-2022-41324

CISA Vulnrichment

Updated Jul 15, 2024

NVD

Status Deferred

Modified Jun 17, 2026

Link CVE-2022-41324

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 20, 2024

Updated Mar 14, 2025

Link EUVD-2022-44531

GitHub

No data