Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-39201

Fixed in a distro release EPSS 2%CVSS 6.8

Grafana is an open source observability and data visualization platform. Starting with version 5.0.0-beta1 and prior to versions 8.5.14 and 9.1.8, Grafana could leak the authentication cookie of users to plugins. The vulnerability impacts data source and plugin proxy endpoints under certain conditions. The destination plugin could receive a user's Grafana authentication cookie. Versions 9.1.8 and 8.5.14 contain a patch for this issue. There are no known workarounds.

Published 2022-10-13 · CVE record · OSV

Products: grafana

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/grafana/grafana8.5.14
Gogithub.com/grafana/grafana9.1.8
Gogithub.com/grafana/grafanano fix

Distro releases

ReleasePackageFixed in
AlmaLinux:9grafana9.2.10-7.el9_3.alma.1
Chainguardgrafana-77.5.28-r0
Chainguardgrafana-fips-11.60
Chainguardgrafana-fips-12.012.0.10-r6
Chainguardgrafana-fips-12.112.1.10.01-r3
Chainguardgrafana-fips-12.20
Chainguardgrafana-fips-12.30
Chainguardgrafana-fips-12.40
Chainguardgrafana-fips-13.00
Chainguardgrafana-fips-13.113.1.0-r0
Red Hat:enterprise_linux:9grafana0:9.2.10-7.el9_3
Red Hat:enterprise_linux:9grafana-debuginfo0:9.2.10-7.el9_3
Red Hat:enterprise_linux:9grafana-debugsource0:9.2.10-7.el9_3
SUSE:Linux Enterprise Module for Package Hub 15 SP4grafana8.5.15-150200.3.32.1
SUSE:Manager Client Tools 12grafana8.5.15-1.39.1
SUSE:Manager Client Tools 12kiwi-desc-saltboot0.1.1673279145.e7616bd-1.32.1
SUSE:Manager Client Tools 12mgr-osad4.3.7-1.42.1
SUSE:Manager Client Tools 12mgr-push4.3.5-1.24.1
SUSE:Manager Client Tools 12rhnlib4.3.5-21.46.1
SUSE:Manager Client Tools 12spacecmd4.3.18-38.115.1
SUSE:Manager Client Tools 12spacewalk-client-tools4.3.14-52.83.1
SUSE:Manager Client Tools 12uyuni-common-libs4.3.7-1.30.1
SUSE:Manager Client Tools 12-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-4.6.2
SUSE:Manager Client Tools 12-BETAgolang-github-boynux-squid_exporter1.6-4.9.2
SUSE:Manager Client Tools 12-BETAgolang-github-lusitaniae-apache_exporter1.0.0-4.12.4
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-alertmanager0.26.0-4.12.4
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-node_exporter1.5.0-4.15.4
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-prometheus2.45.0-4.33.3
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-promu0.14.0-4.12.2
SUSE:Manager Client Tools 12-BETAgrafana9.5.8-4.21.2
SUSE:Manager Client Tools 12-BETAkiwi-desc-saltboot0.1.1687520761.cefb248-4.15.2
SUSE:Manager Client Tools 12-BETAmgr-push5.0.1-4.21.4
SUSE:Manager Client Tools 12-BETAprometheus-blackbox_exporter0.24.0-3.6.3
SUSE:Manager Client Tools 12-BETAprometheus-postgres_exporter0.10.1-3.6.4
SUSE:Manager Client Tools 12-BETApython-hwdata2.3.5-15.12.2
SUSE:Manager Client Tools 12-BETArhnlib5.0.1-24.30.3
SUSE:Manager Client Tools 12-BETAspacecmd5.0.1-41.42.3
SUSE:Manager Client Tools 12-BETAsupportutils-plugin-salt1.2.2-9.9.2
SUSE:Manager Client Tools 12-BETAsupportutils-plugin-susemanager-client5.0.1-9.15.2
SUSE:Manager Client Tools 12-BETAsystem-user-grafana1.0.0-3.7.2
SUSE:Manager Client Tools 12-BETAsystem-user-prometheus1.0.0-3.7.2
SUSE:Manager Client Tools 12-BETAuyuni-common-libs5.0.1-3.33.3
SUSE:Manager Client Tools 15dracut-saltboot0.1.1673279145.e7616bd-150000.1.44.1
SUSE:Manager Client Tools 15grafana8.5.15-150000.1.39.1
SUSE:Manager Client Tools 15mgr-osad4.3.7-150000.1.42.1
SUSE:Manager Client Tools 15mgr-push4.3.5-150000.1.24.2
SUSE:Manager Client Tools 15rhnlib4.3.5-150000.3.40.1
SUSE:Manager Client Tools 15spacecmd4.3.18-150000.3.92.1
SUSE:Manager Client Tools 15spacewalk-client-tools4.3.14-150000.3.74.1
SUSE:Manager Client Tools 15uyuni-common-libs4.3.7-150000.1.30.1
SUSE:Manager Client Tools 15-BETAansible2.9.27-159000.3.9.1
SUSE:Manager Client Tools 15-BETAdracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE:Manager Client Tools 15-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE:Manager Client Tools 15-BETAgolang-github-boynux-squid_exporter1.6-159000.4.9.1
SUSE:Manager Client Tools 15-BETAgolang-github-lusitaniae-apache_exporter1.0.0-159000.4.12.1
SUSE:Manager Client Tools 15-BETAgolang-github-prometheus-prometheus2.45.0-159000.6.33.1
SUSE:Manager Client Tools 15-BETAgrafana9.5.8-159000.4.24.1
SUSE:Manager Client Tools 15-BETAmgr-push5.0.1-159000.4.21.1
SUSE:Manager Client Tools 15-BETAprometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE:Manager Client Tools 15-BETAprometheus-postgres_exporter0.10.1-159000.3.6.1
SUSE:Manager Client Tools 15-BETApython-hwdata2.3.5-159000.5.13.1
SUSE:Manager Client Tools 15-BETApython-pyvmomi6.7.3-159000.3.6.1
SUSE:Manager Client Tools 15-BETArhnlib5.0.1-159000.6.30.1
SUSE:Manager Client Tools 15-BETAspacecmd5.0.1-159000.6.42.1
SUSE:Manager Client Tools 15-BETAspacewalk-client-tools5.0.1-159000.6.48.1
SUSE:Manager Client Tools 15-BETAsupportutils-plugin-salt1.2.2-159000.5.9.1
SUSE:Manager Client Tools 15-BETAsupportutils-plugin-susemanager-client5.0.1-159000.6.15.1
SUSE:Manager Client Tools 15-BETAuyuni-common-libs5.0.1-159000.3.33.1
SUSE:Manager Client Tools 15-BETAuyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE:Manager Client Tools Beta for SLE Micro 5dracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE:Manager Client Tools Beta for SLE Micro 5golang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE:Manager Client Tools Beta for SLE Micro 5prometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE:Manager Client Tools Beta for SLE Micro 5uyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE:Manager Client Tools for SLE Micro 5dracut-saltboot0.1.1673279145.e7616bd-150000.1.44.1
Ubuntu:16.04:LTSgrafanano fix
openSUSE:Leap 15.4dracut-saltboot0.1.1673279145.e7616bd-150000.1.44.1
openSUSE:Leap 15.4grafana8.5.15-150200.3.32.1
openSUSE:Leap 15.4spacecmd4.3.18-150000.3.92.1
openSUSE:Tumbleweedgrafana8.5.14-1.1