Lucene search
GoogleOSV:BIT-GRAFANA-2022-39328HistoryMar 06, 2024 - 10:54 a.m.
BIT-grafana-2022-39328
2024-03-0610:54:29
Google
osv.dev
4
grafana
open-source
monitoring
observability
race condition
authentication
middleware
patch
Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patched in 9.2.4. There are no known workarounds.
Related
veracode
veracode
Privilege Escalation
2022-11-10 02:23:25
osv
osv
Grafana Race condition allowing privilege escalation
2024-05-14 22:26:48
CVE-2022-39328
2022-11-08 23:15:11
openvas
openvas
Grafana 9.2 < 9.2.4 Race Condition Vulnerability (GHSA-vqc4-mpj8-jxch)
2022-11-14 00:00:00
prion
prion
Race condition
2022-11-08 23:15:00
ubuntucve
ubuntucve
CVE-2022-39328
2022-11-08 00:00:00
cve
cve
CVE-2022-39328
2022-11-08 23:15:11
nessus
nessus
cnvd
cnvd
Grafana Competition Conditions Vulnerability
2022-11-10 00:00:00
cvelist
cvelist
github
github
Grafana Race condition allowing privilege escalation
2024-05-14 22:26:48
redhatcve
redhatcve
freebsd
freebsd
Grafana -- Privilege escalation
2022-10-24 00:00:00
Grafana -- Username enumeration
2022-10-24 00:00:00
Grafana -- Privilege escalation
2022-11-08 00:00:00
redos
redos
ROS-20240404-01
2024-04-04 00:00:00
8.1 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
56.5%
Related for OSV:BIT-GRAFANA-2022-39328