Lucene search
Alpine Linux Development TeamALPINE:CVE-2023-3128HistoryJun 22, 2023 - 9:15 p.m.
CVE-2023-3128
2023-06-2221:15:00
Alpine Linux Development Team
security.alpinelinux.org
97
grafana
azure ad
email validation
account takeover
authentication bypass
0.001 Low
EPSS
Percentile
51.3%
Grafana is validating Azure AD accounts based on the email claim.
On Azure AD, the profile email field is not unique and can be easily modified.
This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | 3.18-community | noarch | grafana | = 9.5.2-r4 | UNKNOWN |
Related
nessus
nessus
RHEL 9 : grafana (RHSA-2023:4030)
2023-07-12 00:00:00
Oracle Linux 8 : grafana (ELSA-2023-6972)
2023-11-21 00:00:00
Oracle Linux 9 : grafana (ELSA-2023-4030)
2023-07-20 00:00:00
oraclelinux
oraclelinux
grafana security update
2023-07-19 00:00:00
grafana security and enhancement update
2023-11-17 00:00:00
cve
cve
CVE-2023-3128
2023-06-22 21:15:09
osv
osv
Grafana vulnerable to Authentication Bypass by Spoofing
2023-06-22 21:30:49
BIT-grafana-2023-3128
2024-03-06 10:53:06
Moderate: grafana security and enhancement update
2023-11-14 00:00:00
rocky
rocky
grafana security update
2023-07-19 17:53:40
almalinux
almalinux
Moderate: grafana security and enhancement update
2023-11-14 00:00:00
Critical: grafana security update
2023-07-12 00:00:00
nvd
nvd
CVE-2023-3128
2023-06-22 21:15:09
redhatcve
redhatcve
CVE-2023-3128
2023-06-23 03:16:58
veracode
veracode
Authentication Bypass
2023-07-05 10:26:37
prion
prion
Authentication flaw
2023-06-22 21:15:00
openvas
openvas
github
github
Grafana vulnerable to Authentication Bypass by Spoofing
2023-06-22 21:30:49
freebsd
freebsd
Grafana -- Account takeover / authentication bypass
2023-06-22 00:00:00
cvelist
cvelist
CVE-2023-3128
2023-06-22 20:14:00
redhat
redhat
(RHSA-2023:6972) Moderate: grafana security and enhancement update
2023-11-14 08:41:59
(RHSA-2023:4030) Critical: grafana security update
2023-07-12 03:05:36
rosalinux
rosalinux
Advisory ROSA-SA-2023-2181
2023-07-04 13:37:03
thn
thn
redos
redos
ROS-20240404-01
2024-04-04 00:00:00