Approved changes feed: RSS · Atom

cpe:2.3:a:northern.tech:useradm:1.13.0:*:*:*:*:*:*:*

part: a version: 1.13.0 update: *

VendorNorthern.Tech (0f007064-8d3c-553e-8c6a-34471f428a50)
ProductUseradm (43b8f032-533e-51f7-b36d-6fd1fb89c508)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mendersoftware/useradm purl2cpe 2026-06-01 10:11:07.810613

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-35342 vulnerable 2026-06-08 05:32:48.649770 Details available
The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).
Published: 2021-08-27T09:52:16.000Z
Updated: 2024-08-04T00:33:51.312Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.