TI-2024-31342 CVE-2024-46948 · GHSA-2m7j-4ff8-h52q
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.
Priority LOW 30
Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.
Vulnerabilities
4 records
TI-2022-13994 CVE-2022-32290 · GHSA-vjrr-3c22-j86f
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control.
Priority LOW 19
The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control.
TI-2022-12006 CVE-2022-29556 · GHSA-q445-cmjc-pjfp
The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows…
Priority MEDIUM 44
The iot-manager microservice 1.0.0 in Northern.tech Mender Enterprise before 3.2.2 allows SSRF because the Azure IoT Hub integration provides several SSRF primitives that can execute cross-tenant actions via internal API…
TI-2022-12005 CVE-2022-29555 · GHSA-9g8v-9gqp-2mrx
The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before…
Priority LOW 39
The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2.