Lucene search
MitreCVELIST:CVE-2021-28147HistoryMar 22, 2021 - 2:03 p.m.
CVE-2021-28147
2021-03-2214:03:53
mitre
raw.githubusercontent.com
1
The team sync HTTP API in Grafana Enterprise 6.x before 6.7.6, 7.x before 7.3.10, and 7.4.x before 7.4.5 has an Incorrect Access Control issue. On Grafana instances using an external authentication service and having the EditorsCanAdmin feature enabled, this vulnerability allows any authenticated user to add external groups to any existing team. This can be used to grant a user team permissions that the user isn’t supposed to have.
Related
veracode
veracode
Insecure Access Control
2021-04-29 12:05:21
prion
prion
Design/Logic Flaw
2021-03-22 15:15:00
openvas
openvas
Grafana 6.1.0-beta1 - 7.4.3 Access Control Bypass Vulnerability
2021-03-29 00:00:00
openSUSE: Security Advisory for grafana (openSUSE-SU-2021:2662-1)
2021-08-13 00:00:00
openSUSE: Security Advisory for SUSE (openSUSE-SU-2021:2675-1)
2021-08-13 00:00:00
cve
cve
CVE-2021-28147
2021-03-22 15:15:00
redhatcve
redhatcve
CVE-2021-28147
2021-03-18 18:30:19
osv
osv
CVE-2021-28147
2021-03-22 15:15:14
BIT-grafana-2021-28147
2024-03-06 10:59:54
alpinelinux
alpinelinux
CVE-2021-28147
2021-03-22 15:15:00
ubuntucve
ubuntucve
CVE-2021-28147
2021-03-22 00:00:00
suse
suse
Security update for SUSE Manager Client Tools (moderate)
2021-08-17 00:00:00
Security update for grafana (important)
2021-08-13 00:00:00
Security update for SUSE Manager Client Tools (moderate)
2021-08-12 00:00:00
nessus
nessus
openSUSE 15 Security Update : SUSE Manager Client Tools (openSUSE-SU-2021:1162-1)
2021-08-18 00:00:00
openSUSE 15 Security Update : SUSE Manager Client Tools (openSUSE-SU-2021:2675-1)
2021-08-13 00:00:00
openSUSE 15 Security Update : grafana (openSUSE-SU-2021:1148-1)
2021-08-14 00:00:00