Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-31130

Fixed in a distro release EPSS 1%CVSS 4.9

Grafana is an open source observability and data visualization platform. Versions of Grafana for endpoints prior to 9.1.8 and 8.5.14 could leak authentication tokens to some destination plugins under some conditions. The vulnerability impacts data source and plugin proxy endpoints with authentication tokens. The destination plugin could receive a user's Grafana authentication token. Versions 9.1.8 and 8.5.14 contain a patch for this issue. As a workaround, do not use API keys, JWT authentication, or any HTTP Header based authentication.

Published 2022-10-13 · CVE record · OSV

Products: grafana

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/grafana/grafana9.1.8
Gogithub.com/grafana/grafana8.5.14
Gogithub.com/grafana/grafanano fix

Distro releases

ReleasePackageFixed in
AlmaLinux 9grafana9.2.10-7.el9_3.alma.1
Chainguardgrafana-77.5.28-r0
Chainguardgrafana-fips-11.60
Chainguardgrafana-fips-12.012.0.10-r6
Chainguardgrafana-fips-12.112.1.10.01-r3
Chainguardgrafana-fips-12.20
Chainguardgrafana-fips-12.30
Chainguardgrafana-fips-12.40
Chainguardgrafana-fips-13.00
Chainguardgrafana-fips-13.113.1.0-r0
Red Hat Enterprise Linux 9grafana0:9.2.10-7.el9_3
Red Hat Enterprise Linux 9grafana-debuginfo0:9.2.10-7.el9_3
Red Hat Enterprise Linux 9grafana-debugsource0:9.2.10-7.el9_3
SUSE Linux Enterprise Module for Package Hub 15 SP4grafana8.5.15-150200.3.32.1
SUSE Manager Client Tools 12grafana8.5.15-1.39.1
SUSE Manager Client Tools 12kiwi-desc-saltboot0.1.1673279145.e7616bd-1.32.1
SUSE Manager Client Tools 12mgr-osad4.3.7-1.42.1
SUSE Manager Client Tools 12mgr-push4.3.5-1.24.1
SUSE Manager Client Tools 12rhnlib4.3.5-21.46.1
SUSE Manager Client Tools 12spacecmd4.3.18-38.115.1
SUSE Manager Client Tools 12spacewalk-client-tools4.3.14-52.83.1
SUSE Manager Client Tools 12uyuni-common-libs4.3.7-1.30.1
SUSE Manager Client Tools 12-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-4.6.2
SUSE Manager Client Tools 12-BETAgolang-github-boynux-squid_exporter1.6-4.9.2
SUSE Manager Client Tools 12-BETAgolang-github-lusitaniae-apache_exporter1.0.0-4.12.4
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-alertmanager0.26.0-4.12.4
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-node_exporter1.5.0-4.15.4
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-prometheus2.45.0-4.33.3
SUSE Manager Client Tools 12-BETAgolang-github-prometheus-promu0.14.0-4.12.2
SUSE Manager Client Tools 12-BETAgrafana9.5.8-4.21.2
SUSE Manager Client Tools 12-BETAkiwi-desc-saltboot0.1.1687520761.cefb248-4.15.2
SUSE Manager Client Tools 12-BETAmgr-push5.0.1-4.21.4
SUSE Manager Client Tools 12-BETAprometheus-blackbox_exporter0.24.0-3.6.3
SUSE Manager Client Tools 12-BETAprometheus-postgres_exporter0.10.1-3.6.4
SUSE Manager Client Tools 12-BETApython-hwdata2.3.5-15.12.2
SUSE Manager Client Tools 12-BETArhnlib5.0.1-24.30.3
SUSE Manager Client Tools 12-BETAspacecmd5.0.1-41.42.3
SUSE Manager Client Tools 12-BETAsupportutils-plugin-salt1.2.2-9.9.2
SUSE Manager Client Tools 12-BETAsupportutils-plugin-susemanager-client5.0.1-9.15.2
SUSE Manager Client Tools 12-BETAsystem-user-grafana1.0.0-3.7.2
SUSE Manager Client Tools 12-BETAsystem-user-prometheus1.0.0-3.7.2
SUSE Manager Client Tools 12-BETAuyuni-common-libs5.0.1-3.33.3
SUSE Manager Client Tools 15dracut-saltboot0.1.1673279145.e7616bd-150000.1.44.1
SUSE Manager Client Tools 15grafana8.5.15-150000.1.39.1
SUSE Manager Client Tools 15mgr-osad4.3.7-150000.1.42.1
SUSE Manager Client Tools 15mgr-push4.3.5-150000.1.24.2
SUSE Manager Client Tools 15rhnlib4.3.5-150000.3.40.1
SUSE Manager Client Tools 15spacecmd4.3.18-150000.3.92.1
SUSE Manager Client Tools 15spacewalk-client-tools4.3.14-150000.3.74.1
SUSE Manager Client Tools 15uyuni-common-libs4.3.7-150000.1.30.1
SUSE Manager Client Tools 15-BETAansible2.9.27-159000.3.9.1
SUSE Manager Client Tools 15-BETAdracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE Manager Client Tools 15-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE Manager Client Tools 15-BETAgolang-github-boynux-squid_exporter1.6-159000.4.9.1
SUSE Manager Client Tools 15-BETAgolang-github-lusitaniae-apache_exporter1.0.0-159000.4.12.1
SUSE Manager Client Tools 15-BETAgolang-github-prometheus-prometheus2.45.0-159000.6.33.1
SUSE Manager Client Tools 15-BETAgrafana9.5.8-159000.4.24.1
SUSE Manager Client Tools 15-BETAmgr-push5.0.1-159000.4.21.1
SUSE Manager Client Tools 15-BETAprometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE Manager Client Tools 15-BETAprometheus-postgres_exporter0.10.1-159000.3.6.1
SUSE Manager Client Tools 15-BETApython-hwdata2.3.5-159000.5.13.1
SUSE Manager Client Tools 15-BETApython-pyvmomi6.7.3-159000.3.6.1
SUSE Manager Client Tools 15-BETArhnlib5.0.1-159000.6.30.1
SUSE Manager Client Tools 15-BETAspacecmd5.0.1-159000.6.42.1
SUSE Manager Client Tools 15-BETAspacewalk-client-tools5.0.1-159000.6.48.1
SUSE Manager Client Tools 15-BETAsupportutils-plugin-salt1.2.2-159000.5.9.1
SUSE Manager Client Tools 15-BETAsupportutils-plugin-susemanager-client5.0.1-159000.6.15.1
SUSE Manager Client Tools 15-BETAuyuni-common-libs5.0.1-159000.3.33.1
SUSE Manager Client Tools 15-BETAuyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE Manager Client Tools Beta for SLE Micro 5dracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE Manager Client Tools Beta for SLE Micro 5golang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE Manager Client Tools Beta for SLE Micro 5prometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE Manager Client Tools Beta for SLE Micro 5uyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE Manager Client Tools for SLE Micro 5dracut-saltboot0.1.1673279145.e7616bd-150000.1.44.1
Ubuntu 16.04 LTSgrafanano fix
openSUSE Leap 15.4dracut-saltboot0.1.1673279145.e7616bd-150000.1.44.1
openSUSE Leap 15.4grafana8.5.15-150200.3.32.1
openSUSE Leap 15.4spacecmd4.3.18-150000.3.92.1
openSUSE Tumbleweedgrafana8.5.14-1.1