CVE-2022-23498

highpriority · track · 35EPSS 0.011 · 66 %ileDEEURUUS

grimoire priorityP2 · Scheduled

Exploitable?

—

no known exploitation

Likely / severe?

1.13% (66th) EPSS

CVSS 8.8 · high

Is it mine?

22 products

Check your exposure

Who says so?

7 sources

cnnvd · enisa_euvd · fstec_bdu · osv

EPSS · scored 2026-10-27

Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.

remediations

Vendor fix, mitigation, or workaround guidance, as published by each source.

A vendor fix is available.

Fixedballuff_psirt
Update to the firmware version 2.4.1.

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.8 · impact 5.9

v3.17.1highAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Lsecondary · FSTEC (BDU) RU

v3.17.1highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Lsecondary · ENISA EU

v3.17.1highCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:Lsecondary · security-advisories@github.comexploitability 1.6 · impact 5.5

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Usecondary · CVSS-BT (t0sche)

v3.18.8highCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Balluff PSIRT

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: poc · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-200USCWE-200USCWE-200US

affected products (22)

Products and version ranges known to be affected.

Firmware 2.4.1 installed on BAV MA-NC-00025-01all versionsfixedballuff_psirtDEcpe:2.3:o:balluff_gmbh:BAV_MA-NC-00025-01_firmware:2.4.1:*:*:*:*:*:*:*
Firmware 2.4.1 installed on BNI EGW-720-007-K095all versionsfixedballuff_psirtDEcpe:2.3:o:balluff_gmbh:BNI_EGW-720-007-K095_firmware:2.4.1:*:*:*:*:*:*:*
Firmware <2.4.1 installed on BAV MA-NC-00025-01all versionsballuff_psirtDEcpe:2.3:o:balluff_gmbh:BAV_MA-NC-00025-01_firmware:*:*:*:*:*:*:*:*
Firmware <2.4.1 installed on BNI EGW-720-007-K095all versionsballuff_psirtDEcpe:2.3:o:balluff_gmbh:BNI_EGW-720-007-K095_firmware:*:*:*:*:*:*:*:*
Hitachi Ops Center < Analyzer 10.9.3-00all versionscert_bundDE
Hitachi Ops Center < Viewpoint 10.9.3-00all versionscert_bundDE
Open Source Grafana 9.2.10all versionscert_bundDEcpe:/a:grafana:grafana:9.2.10
Open Source Grafana 9.3.4all versionscert_bundDEcpe:/a:grafana:grafana:9.3.4
Red Hat Enterprise Linuxall versionscert_bundDEcpe:/o:redhat:enterprise_linux:-
Hitachi Ops Center< Analyzer 10.9.3-00cert_bundDE
Hitachi Ops Center< Viewpoint 10.9.3-00cert_bundDE
Grafana Grafana8.3.0-beta1, → 9.2.10enisa_euvdEU
Grafana Labs Grafana≤ 8.3.0 beta2fstec_bduRU
Grafana Labs Grafana≤ 8.3.0 beta1fstec_bduRU
Grafana Labs Grafana8.3.1 → 9.2.10fstec_bduRU
Grafana Labs Grafana9.3.0 → 9.3.4fstec_bduRU
ООО «Ред Софт» РЕД ОС≤ 7.3fstec_bduRU
grafana grafana= 8.3.0nvdUScpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
grafana grafana8.3.1 → 9.2.10nvdUScpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*
grafana grafana9.3.0 → 9.3.4nvdUScpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*

showing 20 of 22

advisories (3)

Vendor and ecosystem advisories describing this.

VDE-2026-049Balluff GmbH: Multiple Vulnerabilities Affecting BNI EGW-720-007-K095 and BAV MA-NC-00025-012026-06-30csaf · balluff_psirtDE
Security advisory for Balluff BNI EGW-720-007-K095 and BAV MA-NC-00025-01 firmware versions prior to 2.4.1. This advisory covers multiple vulnerabilities affecting software components used by the device firmware.
WID-SEC-W-2023-0263Grafana: Schwachstelle ermöglicht Offenlegung von InformationenDeutsch2023-02-01csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Grafana ausnutzen, um Informationen offenzulegen.
BIT-grafana-2022-23498When query caching is enabled in Grafana users can query another users session2024-03-06vendor · osvUS
Grafana is an open-source platform for monitoring and observability. When datasource query caching is enabled, Grafana caches all headers, including `grafana_session`. As a result, any user that queries a datasource where the caching is enabled can acquire another user’s session. To mitigate the vulnerability you can disable datasource query caching for all datasources. This issue has been patched in versions 9.2.10 and 9.3.4.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu osv balluff_psirt cert_bund nvd NVD CVE.org MITRE

published 2023-02-03modified 2026-06-17

references (6)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan