CVEvulnerability
CVE-2021-35342
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-08-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-613
Description
The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).
Affected configurations
• northern.tech useradm 1.14.0
• northern.tech useradm 1.13.0
Related
Weakness · not in database (1)
References
- https://mender.io/blog/cve-2021-35342-useradm-logout-vulnerabililty Third Party Advisory
- https://northern.tech/our-products Product, Vendor Advisory
- https://mender.io/blog/cve-2021-35342-useradm-logout-vulnerabililty Third Party Advisory
- https://northern.tech/our-products Product, Vendor Advisory