Grafana Plugin signature bypass

🗓️ 14 May 2024 22:22:57Reported by GitHub Advisory DatabaseType

Grafana 9.2 Security Patch for Signature Bypass CVE-2022-3112

Reporter	Title	Published	Views	Family All 92
FreeBSD	Grafana -- Plugin signature bypass	4 Jul 202200:00	–	freebsd
FreeBSD	Grafana -- Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins	7 Sep 202200:00	–	freebsd
FreeBSD	Grafana -- Data source and plugin proxy endpoints leaking authentication tokens to some destination plugins	26 Jun 202200:00	–	freebsd
FreeBSD	Grafana -- Improper authentication	7 Sep 202200:00	–	freebsd
IBM Security Bulletins	Security Bulletin: Watson Machine Learning Accelerator on Cloud Pak for Data is affected by multiple vulnerabilities in Grafana	26 Mar 202502:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to improper verification of cryptographic signature in Grafana (CVE-2022-31123)	1 Nov 202320:00	–	ibm
AlpineLinux	CVE-2022-31123	13 Oct 202222:15	–	alpinelinux
AlmaLinux	Moderate: grafana security and enhancement update	7 Nov 202300:00	–	almalinux
ALT Linux	Security fix for the ALT Linux 10 package grafana version 8.5.20-alt1	31 Jan 202300:00	–	altlinux
Chainguard	CVE-2022-31123 vulnerabilities	13 Oct 202222:15	–	cgr

Vulners

Node

grafana grafanaRange7.0.0–8.5.14go

grafana grafanaRange9.0.0–9.1.8go

Source	Link
github	www.github.com/grafana/grafana/security/advisories/GHSA-rhxj-gh46-jvw8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2022-31123
github	www.github.com/grafana/grafana/releases/tag/v9.1.8
security	www.security.netapp.com/advisory/ntap-20221124-0002
github	www.github.com/advisories/GHSA-rhxj-gh46-jvw8

18 Nov 2024 16:26Current

6.7Medium risk

Vulners AI Score6.7

CVSS 3.16.1 - 7.8

EPSS0.00011

SSVC