CVE-2022-32290

CVE-2022-32290 describes an Incorrect Access Control vulnerability in Northern.tech Mender client versions 3.2.0, 3.2.1, and 3.2.2. The client's HTTP proxy, intended for local API calls, improperly listens on all network interfaces instead of only localhost. This allows any client on the same network to connect to the proxy and forward requests to the Mender Server, potentially bypassing mTLS authentication if configured. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-adjacent attack vector with low complexity and no user interaction required. While it doesn't directly expose sensitive data, it increases the attack surface and could be a stepping stone for exploiting other vulnerabilities on the client or server. Currently, there is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. Community discussion and media coverage are minimal, suggesting low awareness or perceived threat at this time.