Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.
CVSS Details
- CVSS 3.1 Base Score: 7.1
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade grafana | Aug 22, 2024 | Mar 22, 2021 |
| Suse | — | Upgrade python2-mgr-cfg-clientUpgrade python3-mgr-cfg-managementUpgrade python3-mgr-cfgUpgrade python3-spacewalk-client-toolsUpgrade ansible-docUpgrade python3-mgr-osadUpgrade mgr-custom-infoUpgrade spacecmdUpgrade python2-mgr-pushUpgrade spacewalk-client-setupUpgrade mgr-cfg-clientUpgrade mgr-virtualization-hostUpgrade python2-mgr-osa-commonUpgrade python2-spacewalk-checkUpgrade python2-spacewalk-koanUpgrade python3-mgr-cfg-clientUpgrade python3-mgr-pushUpgrade python3-mgr-virtualization-hostUpgrade python3-mgr-virtualization-commonUpgrade ansibleUpgrade spacewalk-checkUpgrade python2-mgr-virtualization-commonUpgrade python2-mgr-virtualization-hostUpgrade mgr-osa-dispatcherUpgrade python2-uyuni-common-libsUpgrade mgr-cfg-actionsUpgrade python3-spacewalk-client-setupUpgrade python3-mgr-cfg-actionsUpgrade suseregisterinfoUpgrade python2-spacewalk-client-setupUpgrade python2-spacewalk-oscapUpgrade dracut-saltbootUpgrade spacewalk-koanUpgrade spacewalk-oscapUpgrade python3-rhnlibUpgrade python2-rhnlibUpgrade python3-uyuni-common-libsUpgrade python2-mgr-cfg-managementUpgrade python2-mgr-cfgUpgrade python2-suseregisterinfoUpgrade python2-mgr-osadUpgrade ansible-testUpgrade python2-mgr-osa-dispatcherUpgrade python3-mgr-osa-commonUpgrade python2-mgr-cfg-actionsUpgrade mgr-cfgUpgrade python3-spacewalk-checkUpgrade mgr-osadUpgrade python3-spacewalk-oscapUpgrade grafanaUpgrade python3-mgr-osa-dispatcherUpgrade golang-github-prometheus-prometheusUpgrade python3-spacewalk-koanUpgrade python2-spacewalk-client-toolsUpgrade python3-suseregisterinfoUpgrade mgr-cfg-managementUpgrade spacewalk-client-toolsUpgrade mgr-push | Aug 13, 2021 | Mar 22, 2021 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub