Non évaluée
The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used. Versions...
CVE-2022-28660
Première détection SecPulse
Description d'origine La description telle que publiée par la source (souvent en anglais).
The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used. Versions 1.2.1, 1.3.1, and 1.4.0 contain the bugfix. This affects -auth.type=enterprise in microservices mode
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory security.netapp.com
- web grafana.com