Medium WID-SEC-2022-2204 1 CVE

Grafana: Schwachstelle ermöglicht Offenlegung von Informationen

Published Nov 30, 2022 · Updated Nov 30, 2022 · de-DE

Vendor: Grafana Product: Open Source Grafana Synthetic Monitoring Agent < 0.12.0 Platform: Linux Platform: Windows

Summary

Ein anonymer Angreifer aus dem angrenzenden Netzbereich kann eine Schwachstelle in Grafana ausnutzen, um Informationen offenzulegen.

Product

Grafana ist eine Open-Source Analyse- und Visualisierungssoftware.

Vulnerabilities 1

High 7.2

CVE-2022-46156

Grafana's default installation of `synthetic-monitoring-agent` exposes sensitive information

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network a…

Grafana synthetic-monitoring-agent github.com/grafana/synthetic-monitoring-agent github.com/grafana/synthetic-monitoring-agent/cmd/synthetic-monitoring-agent Go

Nov 30, 2022

Revision history

2022-11-30 #1
Initiale Fassung

References

Grafana Security Advisory vom 2022-11-30
https://grafana.com/blog/2022/11/30/security-release-new-version-of-synthetic-monitoring-agent-with-a-high-severity-fix-for-cve-2022-46156/