Lucene search
Redhat.comRH:CVE-2022-31130HistoryOct 14, 2022 - 5:59 a.m.
CVE-2022-31130
2022-10-1405:59:13
redhat.com
access.redhat.com
74
grafana
gitlab
data source plugin
api key
authentication token
attacker
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
44.1%
A flaw was found in Grafana’s use of the GitLab data source plugin, leaking the API key to gitlab. This can result in the destination plugin receiving a Grafana user’s authentication token, which could be used by an attacker.
Related
ibm
ibm
osv
osv
Grafana Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins in github.com/grafana/grafana
2024-06-05 15:10:42
BIT-grafana-2022-31130
2024-03-06 10:56:13
CVE-2022-31130
2022-10-13 23:15:09
github
github
nessus
nessus
cve
cve
CVE-2022-31130
2022-10-13 23:15:09
cgr
cgr
CVE-2022-31130 vulnerabilities
2024-05-19 03:07:16
prion
prion
Design/Logic Flaw
2022-10-13 23:15:00
alpinelinux
alpinelinux
CVE-2022-31130
2022-10-13 23:15:00
nvd
nvd
CVE-2022-31130
2022-10-13 23:15:09
veracode
veracode
Information Disclosure
2022-10-17 11:15:16
openvas
openvas
Grafana Privilege Escalation Vulnerability (GHSA-jv32-5578-pxjc)
2022-10-18 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:0362-1)
2023-02-13 00:00:00
openSUSE: Security Advisory for grafana (SUSE-SU-2023:0362-1)
2024-03-04 00:00:00
ubuntucve
ubuntucve
CVE-2022-31130
2022-10-13 00:00:00
cvelist
cvelist
freebsd
freebsd
Grafana -- Plugin signature bypass
2022-07-04 00:00:00
Grafana -- Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
2022-06-26 00:00:00
Grafana -- Improper authentication
2022-09-07 00:00:00
redhat
redhat
almalinux
almalinux
Moderate: grafana security and enhancement update
2023-11-07 00:00:00
oraclelinux
oraclelinux
grafana security and enhancement update
2023-11-11 00:00:00
altlinux
altlinux
Security fix for the ALT Linux 10 package grafana version 8.5.20-alt1
2023-01-31 00:00:00
wallarmlab
wallarmlab
Q4-2022 API ThreatStats™ Report
2023-02-22 16:02:55
redos
redos
ROS-20240404-01
2024-04-04 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - April 2023
2023-04-18 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
44.1%
Related for RH:CVE-2022-31130