← back
CVE-2021-35342

CVE-2021-35342

EPSS 1.1%
The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://mender.io/blog/cve-2021-35342-useradm-logout-vulnerabililtyhttps://northern.tech/our-products