Privilege Escalation

gafana is vulnerable to privilege escalation. An attacker can take over another user's account in the grafana instance by supplying a login name through the specified OAuth IdP when the attacker's external user id is linked to a grafana account, and the attacker knows the grafana user name of the...

CVE-2022-31107

Grafana is an open-source platform for monitoring and observability. In versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, it is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP which provides a login name to take over the account of...

CVE-2022-31107

CVE-2022-31107 is a Grafana OAuth account takeover vulnerability. It affects Grafana versions 5.3 through 9.0.3 and also 8.5.9, 8.4.10, and 8.3.10. A malicious user who can log in via a configured OAuth IdP can take over another Grafana user’s account if the attacker’s external user id and email ...

CVE-2022-31107

A flaw was found in Grafana. This flaw allows a malicious user with the authorization to log into a Grafana instance via a configured OAuth IdP to take over an existing Grafana account under certain conditions. Mitigation As a workaround, it is possible to disable any OAuth login or ensure that a...

GSD-2022-1003045 arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for bluetooth

arm64: dts: qcom: sc7280-idp: Configure CTS pin to bias-bus-hold for bluetooth This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.14 by commi...

CVE-2022-1010

The Login using WordPress Users WP as SAML IDP WordPress plugin before 1.13.4 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks when the unfilteredhtml capability is disallowed for example in...

CVE-2022-1010

CVE-2022-1010 affects the WordPress plugin “Login using WordPress Users” (WP as SAML IDP) for versions prior to 1.13.4. The vulnerability arises because the plugin does not sanitize and escape several settings, which could allow stored Cross-Site Scripting (XSS) by high-privilege users (e.g., adm...

Grafana -- OAuth Account Takeover

Grafana Labs reports: It is possible for a malicious user who has authorization to log into a Grafana instance via a configured OAuth IdP to take over an existing Grafana account under some conditions...

Malicious code in eks-auto-create-idp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe5220ea6202484d070bbe62ba66ccb40f7d0b230bcfb2a4208d4aec4877ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2682 Malicious code in eks-auto-create-idp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware abe5220ea6202484d070bbe62ba66ccb40f7d0b230bcfb2a4208d4aec4877ac7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idp-shared-node-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 924985792a90f0e9ebc02fb735718e78effffb1d34a5862e84d55ba9189fbeab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3778 Malicious code in idp-shared-node-library (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 924985792a90f0e9ebc02fb735718e78effffb1d34a5862e84d55ba9189fbeab Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idp-ssr-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08090d29306b03b2059991a752dd09fa1b545e62a4a9a6add93d38c61bf49fc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idp-core-upperfunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1373820d7d831ddfeff6c51bfa444e10ffc7bfb1fd2a33bb6bf429a9b30ee96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idp-test-test-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9493488bd24ee8204cae38eceeffa4146c22c5a34abd269163d3eaadf420583d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3779 Malicious code in idp-ssr-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 08090d29306b03b2059991a752dd09fa1b545e62a4a9a6add93d38c61bf49fc3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3777 Malicious code in idp-core-upperfunnel (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d1373820d7d831ddfeff6c51bfa444e10ffc7bfb1fd2a33bb6bf429a9b30ee96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3780 Malicious code in idp-test-test-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9493488bd24ee8204cae38eceeffa4146c22c5a34abd269163d3eaadf420583d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

VMware vCenter Extract Secrets from vmdir / vmafd DB File

Grab certificates from the vCenter server vmdird and vmafd database files and adds them to loot. The vmdird MDB database file can be found on the live appliance under the path /storage/db/vmware-vmdir/data.mdb, and the DB vmafd is under path /storage/db/vmware-vmafd/afd.db. The vmdir database...

Authorization

OAuthenticator is an OAuth token library for the JupyerHub login handler. CILogonOAuthenticator is provided by the OAuthenticator package, and lets users log in to a JupyterHub via CILogon. This is primarily used to restrict a JupyterHub only to users of a given institute. The allowedidps...