Описание
Grafana: Users can generate Service Account tokens after permissions removal
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
Пакеты
github.com/grafana/grafana
< 1.9.2-0.20260513165311-fb7336fc36c1
1.9.2-0.20260513165311-fb7336fc36c1
Связанные уязвимости
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
When a user's access to mint tokens for a service account is revoked, ...
Уязвимость платформы для мониторинга и наблюдения Grafana, связанная с ошибочным доступом к учетной записи по истечении срока действия токена, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации