Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2021:3769
HistoryOct 12, 2021 - 10:34 a.m.

(RHSA-2021:3769) Important: grafana security update

2021-10-1210:34:07
access.redhat.com
16

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON

Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB.

Security Fix(es):

  • grafana: Snapshot authentication bypass (CVE-2021-39226)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat8ppc64legrafana-elasticsearch< 6.2.2-7.el8_1grafana-elasticsearch-6.2.2-7.el8_1.ppc64le.rpm
RedHat8ppc64legrafana-influxdb< 6.2.2-7.el8_1grafana-influxdb-6.2.2-7.el8_1.ppc64le.rpm
RedHat8x86_64grafana-azure-monitor< 6.2.2-7.el8_1grafana-azure-monitor-6.2.2-7.el8_1.x86_64.rpm
RedHat8x86_64grafana-elasticsearch< 6.2.2-7.el8_1grafana-elasticsearch-6.2.2-7.el8_1.x86_64.rpm
RedHat8x86_64grafana-cloudwatch< 6.2.2-7.el8_1grafana-cloudwatch-6.2.2-7.el8_1.x86_64.rpm
RedHat8aarch64grafana-prometheus< 6.2.2-7.el8_1grafana-prometheus-6.2.2-7.el8_1.aarch64.rpm
RedHat8ppc64legrafana-cloudwatch< 6.2.2-7.el8_1grafana-cloudwatch-6.2.2-7.el8_1.ppc64le.rpm
RedHat8s390xgrafana-elasticsearch< 6.2.2-7.el8_1grafana-elasticsearch-6.2.2-7.el8_1.s390x.rpm
RedHat8s390xgrafana-mysql< 6.2.2-7.el8_1grafana-mysql-6.2.2-7.el8_1.s390x.rpm
RedHat8ppc64legrafana-stackdriver< 6.2.2-7.el8_1grafana-stackdriver-6.2.2-7.el8_1.ppc64le.rpm
Rows per page:
1-10 of 561

Related

checkpoint_advisories 1
nessus 11
alpinelinux 1
oraclelinux 1
ubuntucve 1
attackerkb 2
fedora 2
osv 4
redhatcve 1
redhat 8
github 1
veracode 1
prion 1
cve 1
nuclei 1
cisa_kev 1
almalinux 1
f5 1
freebsd 1
rocky 1
altlinux 2
suse 2
thn 1
checkpoint_advisories
checkpoint_advisories
Grafana Snapshot Feature Information Disclosure (CVE-2021-39226)
2021-12-22 00:00:00
nessus
nessus
RHEL 8 : grafana (RHSA-2021:3770)
2021-10-13 00:00:00
RHEL 8 : grafana (RHSA-2021:3771)
2021-10-13 00:00:00
RHEL 8 : grafana (RHSA-2021:3769)
2021-10-13 00:00:00
alpinelinux
alpinelinux
CVE-2021-39226
2021-10-05 18:15:00
oraclelinux
oraclelinux
grafana security update
2021-10-12 00:00:00
ubuntucve
ubuntucve
CVE-2021-39226
2021-10-05 00:00:00
attackerkb
attackerkb
CVE-2021-39226
2021-10-05 00:00:00
CVE-2021-38406
2021-09-09 00:00:00
fedora
fedora
[SECURITY] Fedora 35 Update: grafana-7.5.11-1.fc35
2021-10-29 23:24:26
[SECURITY] Fedora 34 Update: grafana-7.5.11-1.fc34
2021-10-19 00:37:37
osv
osv
Important: grafana security update
2021-10-12 10:35:50
CVE-2021-39226
2021-10-05 18:15:07
BIT-grafana-2021-39226
2024-03-06 10:59:36
redhatcve
redhatcve
CVE-2021-39226
2021-10-05 21:46:19
redhat
redhat
(RHSA-2021:3771) Important: grafana security update
2021-10-12 10:35:50
(RHSA-2021:3770) Important: grafana security update
2021-10-12 10:35:03
(RHSA-2022:6322) Moderate: OpenShift Container Platform 4.7.59 bug fix and security update
2022-09-13 13:48:03
github
github
Authentication bypass for viewing and deletions of snapshots
2021-10-05 20:24:02
veracode
veracode
Authentication Bypass
2021-10-06 02:50:53
prion
prion
Design/Logic Flaw
2021-10-05 18:15:00
cve
cve
CVE-2021-39226
2021-10-05 18:15:00
nuclei
nuclei
Grafana Snapshot - Authentication Bypass
2021-12-01 19:37:40
cisa_kev
cisa_kev
Grafana Authentication Bypass Vulnerability
2022-08-25 00:00:00
almalinux
almalinux
Important: grafana security update
2021-10-12 10:35:50
f5
f5
K22322802 : Grafana vulnerability CVE-2021-39226
2021-10-26 00:00:00
freebsd
freebsd
Grafana -- Snapshot authentication bypass
2021-09-15 00:00:00
rocky
rocky
grafana security update
2021-10-12 10:35:50
altlinux
altlinux
Security fix for the ALT Linux 9 package grafana version 7.5.13-alt1
2022-01-31 00:00:00
Security fix for the ALT Linux 10 package grafana version 8.1.8-alt1
2021-12-16 00:00:00
suse
suse
Security update for grafana (important)
2022-01-20 00:00:00
Security update for SUSE Manager Client Tools (moderate)
2022-04-25 00:00:00
thn
thn
CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
2022-08-29 04:23:00

7.3 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.972 High

EPSS

Percentile

99.8%

JSON
Related for RHSA-2021:3769
checkpoint_advisories1nessus11alpinelinux1oraclelinux1ubuntucve1attackerkb2fedora2osv4redhatcve1redhat8github1veracode1prion1cve1nuclei1cisa_kev1almalinux1f51freebsd1rocky1altlinux2suse2thn1