Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade grafana | Aug 22, 2024 | Mar 22, 2021 |
| Suse | — | Upgrade ansibleUpgrade python3-mgr-virtualization-hostUpgrade python2-spacewalk-checkUpgrade python2-spacewalk-oscapUpgrade spacecmdUpgrade python3-mgr-cfg-clientUpgrade python2-mgr-cfg-clientUpgrade mgr-custom-infoUpgrade python3-mgr-cfg-actionsUpgrade mgr-osa-dispatcherUpgrade python2-mgr-virtualization-commonUpgrade python3-mgr-osadUpgrade python3-spacewalk-client-toolsUpgrade python2-mgr-virtualization-hostUpgrade python3-mgr-pushUpgrade python2-spacewalk-koanUpgrade python3-mgr-cfg-managementUpgrade ansible-docUpgrade mgr-virtualization-hostUpgrade mgr-cfg-clientUpgrade mgr-cfg-actionsUpgrade python3-mgr-virtualization-commonUpgrade python2-uyuni-common-libsUpgrade python3-spacewalk-client-setupUpgrade python2-mgr-pushUpgrade suseregisterinfoUpgrade python2-mgr-osa-commonUpgrade dracut-saltbootUpgrade spacewalk-client-setupUpgrade python2-spacewalk-client-setupUpgrade spacewalk-checkUpgrade python3-mgr-cfgUpgrade python3-spacewalk-checkUpgrade python3-mgr-osa-commonUpgrade python3-mgr-osa-dispatcherUpgrade python3-spacewalk-koanUpgrade spacewalk-client-toolsUpgrade mgr-cfgUpgrade spacewalk-oscapUpgrade python2-spacewalk-client-toolsUpgrade python2-mgr-osa-dispatcherUpgrade python2-mgr-osadUpgrade ansible-testUpgrade mgr-pushUpgrade python3-rhnlibUpgrade python2-suseregisterinfoUpgrade python2-rhnlibUpgrade python2-mgr-cfg-managementUpgrade python3-uyuni-common-libsUpgrade spacewalk-koanUpgrade grafanaUpgrade python3-spacewalk-oscapUpgrade python2-mgr-cfgUpgrade python3-suseregisterinfoUpgrade golang-github-prometheus-prometheusUpgrade mgr-osadUpgrade python2-mgr-cfg-actionsUpgrade mgr-cfg-management | Aug 13, 2021 | Mar 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub