Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
altlinuxHttps://packages.altlinux.org/en/sisyphus/security/B3F65620CF7BDF24B6CE923BADDADF1F
HistoryJan 31, 2023 - 12:00 a.m.

Security fix for the ALT Linux 10 package grafana version 8.5.20-alt1

2023-01-3100:00:00
https://packages.altlinux.org/en/sisyphus/security/
packages.altlinux.org
16

8.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

JSON

8.5.20-alt1 built Jan. 31, 2023 Alexey Shabalin in task #314152

Jan. 25, 2023 Alexey Shabalin

- 8.5.20
- Fixes:
  + CVE-2022-39307
  + CVE-2022-39306
  + CVE-2022-39229
  + CVE-2022-39201
  + CVE-2022-36062
  + CVE-2022-35957
  + CVE-2022-31130
  + CVE-2022-31123
  + CVE-2022-31107
  + CVE-2022-31097
  + CVE-2022-29170

Related

openvas 18
nessus 34
freebsd 10
osv 28
almalinux 4
oraclelinux 5
redhat 8
suse 2
redos 2
redhatcve 11
ibm 10
alpinelinux 11
prion 11
cnvd 2
ubuntucve 8
cve 11
checkpoint_advisories 1
veracode 12
rocky 2
cgr 8
fedora 1
openvas
openvas
SUSE: Security Advisory (SUSE-SU-2023:0362-1)
2023-02-13 00:00:00
openSUSE: Security Advisory for grafana (SUSE-SU-2023:0362-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2022:3751-1)
2022-10-27 00:00:00
nessus
nessus
SUSE SLED15 / SLES15 / openSUSE 15 Security Update : grafana (SUSE-SU-2023:0362-1)
2023-02-14 00:00:00
openSUSE 15 Security Update : SUSE Manager Client Tools (SUSE-SU-2023:0353-1)
2023-02-14 00:00:00
Oracle Linux 9 : grafana (ELSA-2023-6420)
2023-11-16 00:00:00
freebsd
freebsd
Grafana -- Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
2022-06-26 00:00:00
Grafana -- Improper authentication
2022-09-07 00:00:00
Grafana -- Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins
2022-09-07 00:00:00
osv
osv
Moderate: grafana security and enhancement update
2023-11-07 00:00:00
BIT-grafana-2022-29170
2024-03-06 10:56:56
BIT-grafana-2022-36062
2024-03-06 10:55:30
almalinux
almalinux
Moderate: grafana security and enhancement update
2023-11-07 00:00:00
Moderate: grafana security and enhancement update
2023-05-09 00:00:00
Important: grafana security update
2022-07-26 00:00:00
oraclelinux
oraclelinux
grafana security and enhancement update
2023-11-11 00:00:00
grafana security update
2022-07-26 00:00:00
grafana security and enhancement update
2023-05-15 00:00:00
redhat
redhat
(RHSA-2023:6420) Moderate: grafana security and enhancement update
2023-11-07 06:05:17
(RHSA-2023:2167) Moderate: grafana security and enhancement update
2023-05-09 05:02:10
(RHSA-2023:3642) Important: Red Hat Ceph Storage 6.1 Container security and bug fix update
2023-06-15 15:57:53
suse
suse
Security update for SUSE Manager Client Tools (moderate)
2022-10-26 00:00:00
Security update for grafana (important)
2022-10-26 00:00:00
redos
redos
ROS-20240404-01
2024-04-04 00:00:00
ROS-20240403-01
2024-04-03 00:00:00
redhatcve
redhatcve
CVE-2022-39328
2022-11-09 04:56:18
CVE-2022-39307
2022-11-09 04:56:08
CVE-2022-39306
2022-11-09 04:55:58
ibm
ibm
Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data is affected by multiple vulnerabilities in Grafana
2023-11-17 16:01:52
Security Bulletin: IBM Storage Ceph is vulnerable to improper input validation in Grafana (CVE-2022-39306)
2023-11-01 19:34:46
Security Bulletin: IBM Storage Ceph is vulnerable to improper authentication in Grafana (CVE-2022-39229)
2023-11-01 19:38:48
alpinelinux
alpinelinux
CVE-2022-29170
2022-05-20 16:15:00
CVE-2022-31123
2022-10-13 22:15:00
CVE-2022-39307
2022-11-09 23:15:00
prion
prion
Design/Logic Flaw
2022-05-20 16:15:00
Design/Logic Flaw
2022-09-22 18:15:00
Input validation
2022-11-09 22:15:00
cnvd
cnvd
Grafana Account Enumeration Vulnerability
2022-11-10 00:00:00
Grafana Denial of Service Vulnerability
2022-10-14 00:00:00
ubuntucve
ubuntucve
CVE-2022-39307
2022-11-09 00:00:00
CVE-2022-39306
2022-11-09 00:00:00
CVE-2022-39201
2022-10-13 00:00:00
cve
cve
CVE-2022-36062
2022-09-22 18:15:00
CVE-2022-31097
2022-07-15 12:15:00
CVE-2022-31107
2022-07-15 13:15:00
checkpoint_advisories
checkpoint_advisories
Grafana Cross-Site Scripting (CVE-2022-31097)
2022-11-27 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2022-07-18 12:12:46
Authentication Bypass
2022-10-17 08:35:54
Privilege Escalation
2022-11-11 04:12:28
rocky
rocky
grafana security update
2022-07-26 13:54:29
grafana security update
2022-07-26 13:52:05
cgr
cgr
CVE-2022-36062 vulnerabilities
2024-04-28 09:06:10
CVE-2022-31107 vulnerabilities
2024-04-28 09:06:10
CVE-2022-39307 vulnerabilities
2024-04-28 09:06:10
fedora
fedora
[SECURITY] Fedora 37 Update: grafana-9.0.9-1.fc37
2022-09-27 00:16:46

8.7 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N

4.9 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

JSON
Related for B3F65620CF7BDF24B6CE923BADDADF1F
openvas18nessus34freebsd10osv28almalinux4oraclelinux5redhat8suse2redos2redhatcve11ibm10alpinelinux11prion11cnvd2ubuntucve8cve11checkpoint_advisories1veracode12rocky2cgr8fedora1