Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
mendersoftware/mender-server
main @ 740e630
21
Fixes
0
CVEs
CRITICAL
Peak severity
20.0%
Coverage
Highlights
Auth Bypass: 13 prior fixes. Scrutinize any change in this area.
backend/services/deviceauth/devauth/devauth.go: most-fixed (9 issues). Treat as high-risk during review.
17 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Auth Bypass: Multiple fixes show that device status transitions (accept/reject/delete) lacked proper checks (limits, provisioned flags, revisions, exclusion of current auth set), allowing bypasses or stale credential persistence.
Auth Bypass: Signature verification was moved to the start of the authentication request handler; previously, requests with invalid signatures could be processed, leading to full authentication bypass.
Auth Bypass: A race condition in token caching could cache invalid token values, enabling authentication bypass; the fix skips re-caching on invalidation errors.