Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:33791
HistoryJan 20, 2022 - 8:41 a.m.

Information Disclosure

2022-01-2008:41:15
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
github
grafana
information disclosure
oauth
identity
data source
attacker
sensitive data
vulnerability

EPSS

0.001

Percentile

44.4%

JSON

github.com/grafana/grafana is vulnerable to information disclosure. When the forward auth identity is enabled, the library sends the OAuth identity of the most recently logged-in user when sending a query to the data source, allowing an attacker to retrieve sensitive data from the most recently logged-in user.

Related

alpinelinux 1
cvelist 1
nvd 1
prion 1
redhatcve 1
openvas 6
osv 7
cnvd 1
ubuntucve 1
github 1
cve 1
fedora 3
nessus 12
suse 1
oraclelinux 2
redhat 5
rocky 2
almalinux 2
redos 1
ibm 1
alpinelinux
alpinelinux
CVE-2022-21673
2022-01-18 22:15:07
cvelist
cvelist
CVE-2022-21673 OAuth Identity Token exposure in Grafana
2022-01-18 21:35:10
nvd
nvd
CVE-2022-21673
2022-01-18 22:15:07
prion
prion
Design/Logic Flaw
2022-01-18 22:15:00
redhatcve
redhatcve
CVE-2022-21673
2022-01-24 20:53:22
openvas
openvas
Grafana OAuth Identity Token Vulnerability (GHSA-8wjh-59cw-9xh4)
2022-01-19 00:00:00
Fedora: Security Advisory for grafana (FEDORA-2022-9dd03cab55)
2022-04-21 00:00:00
Fedora: Security Advisory for grafana (FEDORA-2022-c5383675d9)
2022-05-08 00:00:00
osv
osv
CVE-2022-21673
2022-01-18 22:15:07
BIT-grafana-2022-21673
2024-03-06 10:58:36
grafana-8.3.4-1.1 on GA media
2024-06-15 00:00:00
cnvd
cnvd
Grafana Information Disclosure Vulnerability (CNVD-2022-06890)
2022-01-19 00:00:00
ubuntucve
ubuntucve
CVE-2022-21673
2022-01-18 00:00:00
github
github
Grafana Forward OAuth Identity Token can allow users to access some data sources
2024-05-14 22:13:44
cve
cve
CVE-2022-21673
2022-01-18 22:15:07
fedora
fedora
[SECURITY] Fedora 36 Update: grafana-7.5.15-2.fc36
2022-05-07 04:56:19
[SECURITY] Fedora 35 Update: grafana-7.5.15-2.fc35
2022-04-20 19:12:21
[SECURITY] Fedora 34 Update: grafana-7.5.15-2.fc34
2022-04-20 19:16:53
nessus
nessus
openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2022:1396-1)
2023-01-20 00:00:00
SUSE SLES12 Security Update : SUSE Manager Client Tools (SUSE-SU-2022:2134-1)
2022-06-22 00:00:00
Oracle Linux 9 : grafana (ELSA-2022-8057)
2022-11-22 00:00:00
suse
suse
Security update for SUSE Manager Client Tools (moderate)
2022-04-25 00:00:00
oraclelinux
oraclelinux
grafana security, bug fix, and enhancement update
2022-11-22 00:00:00
grafana security, bug fix, and enhancement update
2022-11-15 00:00:00
redhat
redhat
(RHSA-2022:7519) Moderate: grafana security, bug fix, and enhancement update
2022-11-08 06:21:47
(RHSA-2022:8057) Important: grafana security, bug fix, and enhancement update
2022-11-15 06:14:26
(RHSA-2022:6024) Moderate: New container image for Red Hat Ceph Storage 5.2 Security update
2022-08-09 20:21:56
rocky
rocky
grafana security, bug fix, and enhancement update
2022-11-08 06:21:47
grafana security, bug fix, and enhancement update
2022-11-15 06:14:26
almalinux
almalinux
Moderate: grafana security, bug fix, and enhancement update
2022-11-08 00:00:00
Important: grafana security, bug fix, and enhancement update
2022-11-15 00:00:00
redos
redos
ROS-20240403-01
2024-04-03 00:00:00
ibm
ibm
Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data is affected by multiple vulnerabilities in Grafana
2023-11-17 16:01:52

EPSS

0.001

Percentile

44.4%

JSON
Related for VERACODE:33791
alpinelinux1cvelist1nvd1prion1redhatcve1openvas6osv7cnvd1ubuntucve1github1cve1fedora3nessus12suse1oraclelinux2redhat5rocky2almalinux2redos1ibm1