The Deviceconnect microservice up to and including 1.3.0 in Northern.tech Mender Enterprise prior to 3.2.2. allows Cross-Origin Websocket Hijacking.
northern.tech mender