CVE-2021-39226—Grafana Authentication Bypass Vulnerability

漏洞名称

Grafana Authentication Bypass Vulnerability

描述

Grafana contains an authentication bypass vulnerability that allows authenticated and unauthenticated users to view and delete all snapshot data, potentially resulting in complete snapshot data loss.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/
• https://nvd.nist.gov/vuln/detail/CVE-2021-39226

相关 CWE

• CWE-287