Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade grafana | Aug 22, 2024 | Mar 22, 2021 |
| Suse | — | Upgrade python3-mgr-osa-commonUpgrade spacewalk-oscapUpgrade spacewalk-koanUpgrade mgr-pushUpgrade ansible-testUpgrade python2-mgr-osadUpgrade python2-mgr-cfg-managementUpgrade python2-mgr-cfgUpgrade mgr-cfg-managementUpgrade python2-rhnlibUpgrade golang-github-prometheus-prometheusUpgrade python3-mgr-osa-dispatcherUpgrade grafanaUpgrade mgr-osadUpgrade python2-mgr-cfg-actionsUpgrade python3-suseregisterinfoUpgrade python3-spacewalk-koanUpgrade spacewalk-client-toolsUpgrade python2-mgr-osa-dispatcherUpgrade python2-spacewalk-client-toolsUpgrade python3-spacewalk-oscapUpgrade mgr-cfgUpgrade python3-uyuni-common-libsUpgrade python2-suseregisterinfoUpgrade python3-rhnlibUpgrade python3-spacewalk-checkUpgrade spacecmdUpgrade python3-mgr-cfg-managementUpgrade python2-spacewalk-checkUpgrade python3-mgr-cfgUpgrade python2-spacewalk-client-setupUpgrade suseregisterinfoUpgrade python3-mgr-pushUpgrade python2-uyuni-common-libsUpgrade python3-spacewalk-client-setupUpgrade python2-spacewalk-koanUpgrade python3-mgr-cfg-actionsUpgrade ansibleUpgrade python3-spacewalk-client-toolsUpgrade python2-mgr-virtualization-commonUpgrade python3-mgr-cfg-clientUpgrade spacewalk-checkUpgrade python3-mgr-virtualization-commonUpgrade mgr-custom-infoUpgrade ansible-docUpgrade python2-spacewalk-oscapUpgrade python3-mgr-osadUpgrade mgr-osa-dispatcherUpgrade mgr-cfg-actionsUpgrade python3-mgr-virtualization-hostUpgrade spacewalk-client-setupUpgrade python2-mgr-cfg-clientUpgrade python2-mgr-pushUpgrade python2-mgr-osa-commonUpgrade mgr-virtualization-hostUpgrade mgr-cfg-clientUpgrade dracut-saltbootUpgrade python2-mgr-virtualization-host | Aug 13, 2021 | Mar 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub