PT-2023-3223 · Grafana +7 · Grafana +7

🗓️ 22 Jun 2023 00:00:00Reported by Positive TechnologiesType

ptsecurity🔗 dbugs.ptsecurity.com👁 35 Views

Grafana allows authentication bypass and account takeover via spoofed Azure Active Directory email in multi-tenant apps.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: CVE-2022-2879, CVE-2022-41715, CVE-2022-2880, CVE-2022-41717, CVE-2022-41716 may affect IBM CICS TX Advanced	16 Mar 202315:24	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in Go may affect IBM CICS TX Standard	24 Feb 202310:43	–	ibm
IBM Security Bulletins	Security Bulletin: IBM i Modernization Engine for Lifecycle Integration is vulnerable to multiple vulnerabilities	16 May 202420:23	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Base OS issues	1 Dec 202316:06	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a sensitive information exposure in golang-jwt [CVE-2024-51744]	27 Feb 202517:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Engineering Workflow Management (EWM) vulnerability CVE-2021-43138	27 Mar 202316:55	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been addressed in IBM Verify Identity Access OIDC Provider (CVE-2024-45337, CVE-2025-22869)	9 Jul 202504:16	–	ibm
IBM Security Bulletins	Security Bulletin: Mutiple Vulnerabilties affects IBM Watson Machine Learning Accelerator 3.5.0 for Cloud Pak for Data 4.6.5	8 Feb 202419:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for Febuary 2023	10 Mar 202318:29	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Deployment Intelligence app for IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	24 May 202218:37	–	ibm

Source	Link
github	www.github.com/NHAS/CVE-2024-45337-POC
github	www.github.com/grafana/bugbounty/security/advisories/GHSA-gxh2-6vvc-rrgp
bdu	www.bdu.fstec.ru/vul/2024-02614
bdu	www.bdu.fstec.ru/vul/2023-01776
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
osv	www.osv.dev/vulnerability/ALSA-2023:6972
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
errata	www.errata.almalinux.org/8/ALSA-2023-6972.html
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
cve	www.cve.mitre.org/cgi-bin/cvename.cgi

14 Feb 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 3.19.8

CVSS 27.8

CVSS 39.8

CVSS 45.7

EPSS0.99933

SSVC