Northern.tech Mender before 3.6.5 and 3.7.x before 3.7.5 has Incorrect Access Control.
NVD-CWE-Other, CWE-284