Vulnerability Description
Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information.
CVSS Score
6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Related Weaknesses (CWE)
References
- https://mender.io/blog/cve-2022-45929-cve-2022-41324-improper-access-control-for
- https://northern.tech
- https://mender.io/blog/cve-2022-45929-cve-2022-41324-improper-access-control-for
- https://northern.tech
FAQ
What is CVE-2022-41324?
CVE-2022-41324 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Northern.tech Mender 3.3.x before 3.3.2 and 3.4.x before 3.4.0 has Incorrect Access Control and allows low-privileged users default read access to some sensitive device information.
How severe is CVE-2022-41324?
CVE-2022-41324 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-41324?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.