Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-31130HistoryOct 13, 2022 - 11:15 p.m.
CVE-2022-31130
2022-10-1323:15:00
Alpine Linux Development Team
security.alpinelinux.org
13
grafana
authentication token leakage
vulnerability
data visualization
api keys
jwt authentication
http header authentication
patch
0.001 Low
EPSS
Percentile
44.1%
Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could leak authentication tokens to some destination plugins under some conditions. The vulnerability impacts data source and plugin proxy endpoints with authentication tokens. The destination plugin could receive a user’s Grafana authentication token. Versions 9.1.8 and 8.5.14 contain a patch for this issue. As a workaround, do not use API keys, JWT authentication, or any HTTP Header based authentication.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.16-community | noarch | grafana | = 8.5.13-r1 | UNKNOWN |
Related
ibm
ibm
nessus
nessus
cve
cve
CVE-2022-31130
2022-10-13 23:15:09
cgr
cgr
CVE-2022-31130 vulnerabilities
2024-05-19 03:07:16
osv
osv
BIT-grafana-2022-31130
2024-03-06 10:56:13
CVE-2022-31130
2022-10-13 23:15:09
prion
prion
Design/Logic Flaw
2022-10-13 23:15:00
nvd
nvd
CVE-2022-31130
2022-10-13 23:15:09
veracode
veracode
Information Disclosure
2022-10-17 11:15:16
redhatcve
redhatcve
CVE-2022-31130
2022-10-14 05:59:13
github
github
cvelist
cvelist
ubuntucve
ubuntucve
CVE-2022-31130
2022-10-13 00:00:00
openvas
openvas
Grafana Privilege Escalation Vulnerability (GHSA-jv32-5578-pxjc)
2022-10-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0362-1)
2023-02-13 00:00:00
openSUSE: Security Advisory for grafana (SUSE-SU-2023:0362-1)
2024-03-04 00:00:00
freebsd
freebsd
Grafana -- Plugin signature bypass
2022-07-04 00:00:00
Grafana -- Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
2022-06-26 00:00:00
Grafana -- Improper authentication
2022-09-07 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: grafana security and enhancement update
2023-11-07 00:00:00
oraclelinux
oraclelinux
grafana security and enhancement update
2023-11-11 00:00:00
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
altlinux
altlinux
Security fix for the ALT Linux 10 package grafana version 8.5.20-alt1
2023-01-31 00:00:00
redos
redos
ROS-20240404-01
2024-04-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00