Instance config inline secret exposure in Grafana in github.com/grafana/agent
Instance config inline secret exposure in Grafana in github.com/grafana/agent
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-41090US | high7.5OT erhöht | — | ||
Grafana Agent is a telemetry collector for sending metrics, logs, and trace data to the opinionated Grafana observability stack. Prior to versions 0.20.1 and 0.21.2, inline secrets… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- https://github.com/grafana/agent/commit/a5479755e946e5c7cddb793ee9adda8f5692ba11FIX
- https://github.com/grafana/agent/commit/af7fb01e31fe2d389e5f1c36b399ddc46b412b21FIX
- https://github.com/grafana/agent/pull/1152FIX
- https://github.com/grafana/agent/releases/tag/v0.20.1WEB
- https://github.com/grafana/agent/releases/tag/v0.21.2WEB
- https://github.com/grafana/agent/security/advisories/GHSA-9c4x-5hgq-q3whADVISORY
- https://nvd.nist.gov/vuln/detail/CVE-2021-41090ADVISORY
- https://security.netapp.com/advisory/ntap-20211229-0004WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan