Instance config inline secret exposure in Grafana in github.com/grafana/agent
Instance config inline secret exposure in Grafana in github.com/grafana/agent
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-41090US | high7.5OT elevated | — | ||
Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observability stack. Prior to versions 0.20.1 and 0.21.2, inline secrets… | ||||
02
references
External citations — patches, advisories, analysis.
- https://github.com/grafana/agent/commit/a5479755e946e5c7cddb793ee9adda8f5692ba11FIX
- https://github.com/grafana/agent/commit/af7fb01e31fe2d389e5f1c36b399ddc46b412b21FIX
- https://github.com/grafana/agent/pull/1152FIX
- https://github.com/grafana/agent/releases/tag/v0.20.1WEB
- https://github.com/grafana/agent/releases/tag/v0.21.2WEB
- https://github.com/grafana/agent/security/advisories/GHSA-9c4x-5hgq-q3whADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2021-41090ADVISORY
- https://security.netapp.com/advisory/ntap-20211229-0004WEB
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan