CVE-2022-29556

概要

参考情報

• mender.io/blog/cve-2022-29555-and-cve-2022-29556-vulnerabilities-in-iot-manager-and-deviceconnect · Vendor Advisory
• northern.tech · Vendor Advisory

mender のその他の脆弱性

• CVE-2024-46948中 4.3Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.
• CVE-2022-32290中 4.3The client in Northern.tech Mender 3.2.0, 3.2.1, and 3.2.2 has Incorrect Access Control. It listens on a random, unprivileged TCP port and e…
• CVE-2022-29555高 8.8The Deviceconnect microservice through 1.3.0 in Northern.tech Mender Enterprise before 3.2.2. allows Cross-Origin Websocket Hijacking.