CVE-2021-35342

The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows…

published August 27, 2021

CVSS
—
EPSS
1%
Percentile
65.6
In the wild
Unconfirmed
What it is

The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01107 · 65.6th percentile
Published
2021-08-27T09:52Z
EPSS history
Timeline
  • 27 AUG 09:52Z
    The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows…
    cvelistv5