Поиск уязвимостей
Количество 8
Количество 8
GHSA-9758-8g25-vw94
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).
CVE-2026-14199
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).
CVE-2026-14199
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).
ROS-20261023-80-0045
Уязвимость grafana
ROS-20261023-73-0044
Уязвимость grafana
ALT-PU-2024-17179
ALT-PU-2024-17179: package `grafana` update to version 11.2.2-alt2
openSUSE-SU-2026:22125-1
Security update for grafana
SUSE-SU-2026:4600-1
Security update for grafana, system-user-grafana
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-9758-8g25-vw94 Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing). | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-14199 Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing). | CVSS3: 7.1 | 0% Низкий | 2 месяца назад |
 | CVE-2026-14199 Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing). | CVSS3: 8.1 | 0% Низкий | 2 месяца назад |
 | ROS-20261023-80-0045 Уязвимость grafana | CVSS3: 8.1 | 0% Низкий | 17 дней назад |
| ROS-20261023-73-0044 Уязвимость grafana | CVSS3: 8.1 | 0% Низкий | 17 дней назад |
| ALT-PU-2024-17179 ALT-PU-2024-17179: package `grafana` update to version 11.2.2-alt2 | CVSS3: 8.8 | почти 2 года назад | |
 | openSUSE-SU-2026:22125-1 Security update for grafana | 20 дней назад | ||
| SUSE-SU-2026:4600-1 Security update for grafana, system-user-grafana | около 1 месяца назад |
Уязвимостей на страницу