The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The team sync HTTP API in Grafana Enterprise 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service, this vulnerability allows any authenticated user to add external groups to existing teams. This can be used to grant a user team permissions that the user isn't supposed to have.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade grafana | Aug 22, 2024 | Mar 22, 2021 |
| Suse | — | Upgrade spacewalk-checkUpgrade mgr-custom-infoUpgrade python2-spacewalk-oscapUpgrade mgr-osa-dispatcherUpgrade python2-mgr-cfg-clientUpgrade python3-spacewalk-client-setupUpgrade mgr-virtualization-hostUpgrade python3-spacewalk-client-toolsUpgrade python2-mgr-osa-commonUpgrade python3-mgr-cfg-managementUpgrade dracut-saltbootUpgrade python2-spacewalk-client-setupUpgrade python2-spacewalk-checkUpgrade mgr-cfgUpgrade python3-mgr-osa-commonUpgrade python3-mgr-virtualization-hostUpgrade spacewalk-client-setupUpgrade spacecmdUpgrade ansible-testUpgrade mgr-cfg-clientUpgrade python2-mgr-pushUpgrade mgr-cfg-actionsUpgrade python3-uyuni-common-libsUpgrade suseregisterinfoUpgrade python2-mgr-cfg-actionsUpgrade python2-mgr-virtualization-commonUpgrade python2-spacewalk-client-toolsUpgrade python2-uyuni-common-libsUpgrade spacewalk-client-toolsUpgrade python3-mgr-cfgUpgrade python3-mgr-osadUpgrade python2-spacewalk-koanUpgrade python3-mgr-cfg-clientUpgrade grafanaUpgrade golang-github-prometheus-prometheusUpgrade python2-mgr-osadUpgrade spacewalk-oscapUpgrade mgr-osadUpgrade mgr-cfg-managementUpgrade python2-mgr-virtualization-hostUpgrade python3-mgr-cfg-actionsUpgrade ansible-docUpgrade mgr-pushUpgrade python3-mgr-virtualization-commonUpgrade python2-mgr-osa-dispatcherUpgrade python3-rhnlibUpgrade python2-suseregisterinfoUpgrade python2-mgr-cfgUpgrade python3-mgr-pushUpgrade python3-suseregisterinfoUpgrade python3-mgr-osa-dispatcherUpgrade python3-spacewalk-checkUpgrade python3-spacewalk-koanUpgrade python3-spacewalk-oscapUpgrade python2-mgr-cfg-managementUpgrade python2-rhnlibUpgrade ansibleUpgrade spacewalk-koan | Aug 13, 2021 | Mar 22, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub