Unrated
The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used. Versions...
CVE-2022-28660
First seen on SecPulse
Original description The description as published by the source.
The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used. Versions 1.2.1, 1.3.1, and 1.4.0 contain the bugfix. This affects -auth.type=enterprise in microservices mode
References
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web grafana.com