The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn't supposed to have.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade grafana | Aug 22, 2024 | Mar 22, 2021 |
| Suse | — | Upgrade python3-mgr-cfg-actionsUpgrade suseregisterinfoUpgrade python2-mgr-virtualization-commonUpgrade python2-spacewalk-koanUpgrade python2-uyuni-common-libsUpgrade mgr-cfg-actionsUpgrade python3-spacewalk-checkUpgrade python3-rhnlibUpgrade python3-mgr-cfgUpgrade spacewalk-client-setupUpgrade python3-spacewalk-oscapUpgrade python2-spacewalk-checkUpgrade python3-uyuni-common-libsUpgrade mgr-virtualization-hostUpgrade ansible-docUpgrade python3-mgr-virtualization-commonUpgrade python3-spacewalk-client-setupUpgrade spacewalk-koanUpgrade spacewalk-oscapUpgrade python2-mgr-cfg-clientUpgrade ansibleUpgrade spacewalk-client-toolsUpgrade python2-spacewalk-client-setupUpgrade python3-mgr-osadUpgrade python2-spacewalk-oscapUpgrade dracut-saltbootUpgrade spacecmdUpgrade python3-mgr-pushUpgrade python3-mgr-cfg-clientUpgrade python3-mgr-cfg-managementUpgrade python3-mgr-osa-dispatcherUpgrade python2-mgr-cfgUpgrade python3-mgr-virtualization-hostUpgrade mgr-osa-dispatcherUpgrade python2-mgr-virtualization-hostUpgrade python3-spacewalk-client-toolsUpgrade python3-mgr-osa-commonUpgrade python2-mgr-cfg-managementUpgrade python2-mgr-pushUpgrade mgr-pushUpgrade mgr-custom-infoUpgrade python3-suseregisterinfoUpgrade python2-mgr-osadUpgrade python3-spacewalk-koanUpgrade mgr-cfg-clientUpgrade python2-mgr-cfg-actionsUpgrade python2-suseregisterinfoUpgrade mgr-cfg-managementUpgrade ansible-testUpgrade golang-github-prometheus-prometheusUpgrade python2-mgr-osa-commonUpgrade python2-spacewalk-client-toolsUpgrade python2-mgr-osa-dispatcherUpgrade mgr-cfgUpgrade grafanaUpgrade python2-rhnlibUpgrade mgr-osadUpgrade spacewalk-check | Aug 13, 2021 | Mar 22, 2021 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub