Use of Cache Containing Sensitive Information

🗓️ 01 Feb 2023 00:00:00Reported by Grafana LabsType

Grafana datasource query caching can expose sessions; disable caching or upgrade to 9.2.10 or 9.3.4.

Reporter	Title	Published	Views	Family All 31
IBM Security Bulletins	Security Bulletin: Netcool Operations Insight v1.6.8 addresses multiple security vulnerabilities.	11 Apr 202311:47	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Storage Ceph is vulnerable to the Exposure of Sensitive Information to an Unauthorized Actor in Grafana (CVE-2022-23498)	31 Jul 202414:14	–	ibm
BDU FSTEC	The vulnerability of the Grafana data visualization web tool lies in the lack of protection for operational data, allowing attackers to gain access to the current user’s session.	6 Mar 202300:00	–	bdu_fstec
Circl	CVE-2022-23498	5 Mar 202520:01	–	circl
CNNVD	Grafana 安全漏洞	3 Feb 202300:00	–	cnnvd
CVE	CVE-2022-23498	3 Feb 202321:34	–	cve
Cvelist	CVE-2022-23498 When query caching is enabled in Grafana users can query another users session	3 Feb 202321:34	–	cvelist
EUVD	EUVD-2022-28551	3 Oct 202520:07	–	euvd
NVD	CVE-2022-23498	3 Feb 202322:15	–	nvd
OpenVAS	Grafana 8.3.0 < 9.2.10, 9.3.0 < 9.3.4 Information Disclosure Vulnerability (GHSA-2j8f-6whh-frc8)	3 Feb 202300:00	–	openvas