CVE-2021-35342

The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).

Score

CVSS 3.1 7.5 High

Status

Modified - cve@mitre.org

Published

2021-08-27

Last modified

2024-08-04

Weaknesses

CWE-613

Affected products

• Useradm (Northern.tech)

References

• https://mender.io/blog/cve-2021-35342-useradm-logout-vulnerabililty
• https://northern.tech/our-products