high8.8
CVE-2022-45929
Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and cou…
Impact
Northern.tech Mender 3.3.x before 3.3.2, 3.5.x before 3.5.0, and 3.6.x before 3.6.0 has Incorrect Access Control and allows users to change their roles and could allow privilege escalation from a low-privileged read-only user to a high-privileged user.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Northern | Northern.Tech Mender 3.3.X | before 3.3.2 |
| 3.5.X | before 3.5.0 | |
| And 3.6.X | before 3.6.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.