CVE-2022-41244

CVE-2022-41244 concerns Jenkins View26 Test-Reporting Plugin, versions 1.0.7 and earlier. The issue is that the plugin does not perform hostname validation when connecting to the configured View26 server, which could be abused in a man-in-the-middle attack to intercept connections. The provided c...

SUSE: Security Advisory (SUSE-SU-2022:2134-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security fix for the ALT Linux 10 package grafana version 8.5.0-alt1

8.5.0-alt1 built May 5, 2022 Alexey Shabalin in task 299382 April 26, 2022 Alexey Shabalin - 8.5.0 - Use pre-builded frontend - Fixes: + CVE-2022-24812 + CVE-2022-21702 + CVE-2022-21703 + CVE-2022-21713 + CVE-2021-43813 + CVE-2021-43815 + CVE-2021-41244 + CVE-2021-41174...

FreeBSD : Grafana -- Incorrect Access Control (99bff2bd-4852-11ec-a828-6c3be5272acd)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 99bff2bd-4852-11ec-a828-6c3be5272acd advisory. - Grafana is an open-source platform for monitoring and observability. In affected versions when the...

CVE-2021-43320

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2021-41244. Reason: This candidate is a reservation duplicate of CVE-2021-41244. Notes: All CVE users should reference CVE-2021-41244 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2021-43320

CVE-2021-43320 is a reservation duplicate of CVE-2021-41244. Grafana before 8.2.4 with the fine-grained access control feature enabled and multiple organizations allows an Organization Admin to list, add, remove, and update user roles in other organizations where they are not admins. Affected ver...

[ASA-202111-6] grafana: access restriction bypass

Arch Linux Security Advisory ASA-202111-6 ========================================= Severity: Medium Date : 2021-11-18 CVE-ID : CVE-2021-41244 Package : grafana Type : access restriction bypass Remote : Yes Link : https://security.archlinux.org/AVG-2559 Summary ======= The package grafana before...

CVE-2021-41244

creationtimestamp| type| source ---|---|--- 2021-11-17 16:14:34+00:00| seen| https://t.me/cibsecurity/32448...

CVE-2021-41244

Grafana CVE-2021-41244 affects Grafana 8.0–8.2.3 when the fine-grained access control beta is enabled and multiple organizations exist. Organization Admins could list, add, remove, and update users’ roles in other organizations where they are not admins, exposing cross-organization access control...