![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.0.145674 |
Category: | Privilege escalation |
Title: | Grafana 7.2.0 - 7.4.3 Privilege Escalation Vulnerability |
Summary: | Grafana is prone to a privilege escalation vulnerability. |
Description: | Summary: Grafana is prone to a privilege escalation vulnerability. Vulnerability Insight: Grafana Enterprise allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access. Affected Software/OS: Grafana version 7.2.0 through 7.4.3. Solution: Update to version 7.3.10, 7.4.4 or later. CVSS Score: 4.9 CVSS Vector: AV:N/AC:M/Au:S/C:P/I:P/A:N |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2021-27962 https://community.grafana.com https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724 https://community.grafana.com/t/release-notes-v6-7-x/27119 https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/ |
Copyright | Copyright (C) 2021 Greenbone AG |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |