Vulnerabilities > CVE-2021-35342 - Insufficient Session Expiration vulnerability in Northern.Tech Useradm 1.13.0/1.14.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
The useradm service 1.14.0 (in Northern.tech Mender Enterprise 2.7.x before 2.7.1) and 1.13.0 (in Northern.tech Mender Enterprise 2.6.x before 2.6.1) allows users to access the system with their JWT token after logout, because of missing invalidation (if the JWT verification cache is enabled).
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 3 |