Lucene search
+L

3 matches found

Positive Technologies
Positive Technologies
•added 2022/11/08 12:00 a.m.•1 views

PT-2022-7314

Name of the Vulnerable Software and Affected Versions Grafana versions 9.2.0 through 9.2.3 Description Grafana is an open-source platform for monitoring and observability. The issue is related to a race condition in the authentication middlewares logic, which may allow an unauthenticated user to...

9.8CVSS0.01041EPSS
SaveExploits0References20
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/11/08 12:00 a.m.•2 views

CVE-2022-39328: Concurrent Execution using Shared Resource with Improper Synchronization

Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patche...

9.8CVSS5.8AI score0.01041EPSS
SaveExploits0References3
Grafana
Grafana
•added 2022/11/08 12:00 a.m.•24 views

Race Condition in Authentication in Grafana

Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patche...

9.8CVSS7.2AI score0.01041EPSS
SaveExploits0
Rows per page
Query Builder