DeutschShown in its original language — a full translation is planned for a future version.
Grafana: Mehrere Schwachstellen
view advisory published 2022-10-12
Ein lokaler Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder einen Denial of Service Zustand herbeizuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-39229US | medium4.3 | — | ||
Grafana is an open source data visualization platform for metrics, logs, and traces. Versions prior to 9.1.8 and 8.5.14 allow one user to block another user's login attempt by regi… | ||||
| CVE-2022-39201US | high7.5 | — | ||
Grafana is an open source observability and data visualization platform. Starting with version 5.0.0-beta1 and prior to versions 8.5.14 and 9.1.8, Grafana could leak the authentica… | ||||
| CVE-2022-31130US | high7.5 | — | ||
Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could leak authentication tokens to some destin… | ||||
| CVE-2022-31123US | high7.8 | — | ||
Grafana is an open source observability and data visualization platform. Versions prior to 9.1.8 and 8.5.14 are vulnerable to a bypass in the plugin signature verification. An atta… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:2167 vom 2023-05-09external
- Red Hat Security Advisory RHSA-2023:2784 vom 2023-05-16external
- Red Hat Security Advisory RHSA-2023:3642 vom 2023-06-15external
- Grafana Release Notes vom 2022-10-12external
- Oracle Linux Security Advisory ELSA-2023-2784 vom 2023-05-24external
- SUSE Security Update SUSE-SU-2023:0353-1 vom 2023-02-10external
- SUSE Security Update SUSE-SU-2023:0362-1 vom 2023-02-10external
- SUSE Security Update SUSE-SU-2023:0352-1 vom 2023-02-10external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan