CVE-2024-37019

June 3, 2024, 7:23 p.m.

Tags

cve@mitre.org
2024-06-03
CVE-2024-37019

Product(s) Impacted

Northern.tech Mender Enterprise

  • before 3.6.4
  • 3.7.x before 3.7.4

Mender Enterprise

  • before 3.6.4
  • 3.7.x before 3.7.4

Description

Northern.tech Mender Enterprise before 3.6.4 and 3.7.x before 3.7.4 has Weak Authentication.

Weaknesses

Date

Published: June 3, 2024, 6:15 p.m.

Last Modified: June 3, 2024, 7:23 p.m.

Status : Awaiting Analysis

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://mender.io/blog/cve-2024-37019-account-takeover-using-saml
cve@mitre.org
https://northern.tech
cve@mitre.org