Patchwire CVEs, their patch status, and feeds to follow them

CVE-2023-3128

Fixed in a distro release EPSS 4%CVSS 9.4

Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app.

Published 2023-06-22 · CVE record · OSV

Products: grafana, Grafana Enterprise

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/grafana/grafana9.4.13
Gogithub.com/grafana/grafana9.3.16
Gogithub.com/grafana/grafana9.2.20
Gogithub.com/grafana/grafana8.5.27

Distro releases

ReleasePackageFixed in
AlmaLinux:8grafana9.2.10-7.el8_9.alma.1
AlmaLinux:9grafana9.0.9-3.el9_2.alma
Chainguardgrafana-70
Chainguardgrafana-7-dashboards0
Chainguardgrafana-7-homepage0
Chainguardgrafana-homepage0
Chainguardsourcegraph-grafana0
Red Hat:ceph_storage:7.1ceph2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-base2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-base2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-base-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-base-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-common2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-common2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-common-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-common-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-debugsource2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-debugsource2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-exporter-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-exporter-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-fuse2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-fuse2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-fuse-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-fuse-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-immutable-object-cache2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-immutable-object-cache2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-immutable-object-cache-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-immutable-object-cache-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-mds-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-mds-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-mgr-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-mgr-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-mib2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-mib2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-mon-client-nvmeof-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-mon-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-mon-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-osd-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-osd-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-radosgw-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-radosgw-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-resource-agents2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-resource-agents2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-selinux2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1ceph-selinux2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-test-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1ceph-test-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1cephadm2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1cephadm-ansible1:3.2.0-1.el9cp
Red Hat:ceph_storage:7.1cephfs-mirror-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1cephfs-mirror-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1cephfs-top2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1cephfs-top2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1gperftools1:2.7-9.el8cp
Red Hat:ceph_storage:7.1gperftools-debugsource1:2.7-9.el8cp
Red Hat:ceph_storage:7.1gperftools-libs1:2.7-9.el8cp
Red Hat:ceph_storage:7.1gperftools-libs-debuginfo1:2.7-9.el8cp
Red Hat:ceph_storage:7.1libcephfs-devel2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1libcephfs-devel2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1libcephfs22:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1libcephfs22:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1libcephfs2-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1libcephfs2-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1libcephsqlite-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1libcephsqlite-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1liboath0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1liboath-debuginfo0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1libpskc-debuginfo0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1librados-devel2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librados-devel2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librados-devel-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librados-devel-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librados22:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librados22:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librados2-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librados2-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1libradospp-devel2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1libradospp-devel2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1libradosstriper12:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1libradosstriper12:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1libradosstriper1-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1libradosstriper1-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librbd-devel2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librbd-devel2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librbd12:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librbd12:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librbd1-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librbd1-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librgw-devel2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librgw-devel2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librgw22:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librgw22:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1librgw2-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1librgw2-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1libunwind0:1.3.1-3.el8cp
Red Hat:ceph_storage:7.1libunwind-debuginfo0:1.3.1-3.el8cp
Red Hat:ceph_storage:7.1libunwind-debugsource0:1.3.1-3.el8cp
Red Hat:ceph_storage:7.1oath-toolkit0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1oath-toolkit-debuginfo0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1oath-toolkit-debugsource0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1oathtool-debuginfo0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1pam_oath-debuginfo0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1pskctool-debuginfo0:2.6.2-3.el8cp
Red Hat:ceph_storage:7.1python3-ceph-argparse2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-ceph-argparse2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-ceph-common2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-ceph-common2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-cephfs2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-cephfs2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-cephfs-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-cephfs-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-rados2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-rados2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-rados-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-rados-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-rbd2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-rbd2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-rbd-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-rbd-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-rgw2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-rgw2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-rgw-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1python3-rgw-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1python3-thrift-debuginfo0:0.13.0-2.el8cp
Red Hat:ceph_storage:7.1rbd-fuse-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1rbd-fuse-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1rbd-mirror-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1rbd-mirror-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1rbd-nbd2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1rbd-nbd2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1rbd-nbd-debuginfo2:18.2.1-194.el8cp
Red Hat:ceph_storage:7.1rbd-nbd-debuginfo2:18.2.1-194.el9cp
Red Hat:ceph_storage:7.1thrift0:0.13.0-2.el8cp
Red Hat:ceph_storage:7.1thrift-debuginfo0:0.13.0-2.el8cp
Red Hat:ceph_storage:7.1thrift-debugsource0:0.13.0-2.el8cp
Red Hat:ceph_storage:7.1thrift-devel-debuginfo0:0.13.0-2.el8cp
Red Hat:ceph_storage:7.1thrift-glib-debuginfo0:0.13.0-2.el8cp
Red Hat:ceph_storage:7.1thrift-qt-debuginfo0:0.13.0-2.el8cp
Red Hat:enterprise_linux:8grafana0:9.2.10-7.el8_9
Red Hat:enterprise_linux:8grafana-debuginfo0:9.2.10-7.el8_9
Red Hat:enterprise_linux:8grafana-debugsource0:9.2.10-7.el8_9
Red Hat:enterprise_linux:9grafana0:9.0.9-3.el9_2
Red Hat:enterprise_linux:9grafana0:9.2.10-7.el9_3
Red Hat:enterprise_linux:9grafana-debuginfo0:9.2.10-7.el9_3
Red Hat:enterprise_linux:9grafana-debuginfo0:9.0.9-3.el9_2
Red Hat:enterprise_linux:9grafana-debugsource0:9.2.10-7.el9_3
Red Hat:enterprise_linux:9grafana-debugsource0:9.0.9-3.el9_2
Rocky Linux:9grafana0:9.0.9-3.el9_2
SUSE:Enterprise Storage 7.1supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-ESPOSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise High Performance Computing 15 SP5-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise Module for Basesystem 15 SP6supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise Module for Package Hub 15 SP4grafana9.5.5-150200.3.44.1
SUSE:Linux Enterprise Module for Package Hub 15 SP5grafana9.5.5-150200.3.44.1
SUSE:Linux Enterprise Module for Package Hub 15 SP6golang-github-prometheus-promu0.17.0-150000.3.24.1
SUSE:Linux Enterprise Module for Package Hub 15 SP6grafana10.4.13-150200.3.59.1
SUSE:Linux Enterprise Server 15 SP3-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise Server 15 SP4-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise Server 15 SP5-LTSSsupportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP3supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP4supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Linux Enterprise Server for SAP Applications 15 SP5supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Manager Client Tools 12golang-github-prometheus-prometheus2.53.3-1.56.1
SUSE:Manager Client Tools 12golang-github-prometheus-promu0.17.0-1.24.1
SUSE:Manager Client Tools 12grafana10.4.13-1.66.2
SUSE:Manager Client Tools 12grafana9.5.5-1.51.1
SUSE:Manager Client Tools 12spacecmd5.0.11-38.153.1
SUSE:Manager Client Tools 12supportutils-plugin-salt1.2.3-6.25.1
SUSE:Manager Client Tools 12supportutils-plugin-susemanager-client5.0.4-6.33.1
SUSE:Manager Client Tools 12uyuni-tools0.1.28-1.16.1
SUSE:Manager Client Tools 12-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-4.6.2
SUSE:Manager Client Tools 12-BETAgolang-github-boynux-squid_exporter1.6-4.9.2
SUSE:Manager Client Tools 12-BETAgolang-github-lusitaniae-apache_exporter1.0.0-4.12.4
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-alertmanager0.26.0-4.12.4
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-node_exporter1.5.0-4.15.4
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-prometheus2.45.0-4.33.3
SUSE:Manager Client Tools 12-BETAgolang-github-prometheus-promu0.14.0-4.12.2
SUSE:Manager Client Tools 12-BETAgrafana9.5.8-4.21.2
SUSE:Manager Client Tools 12-BETAkiwi-desc-saltboot0.1.1687520761.cefb248-4.15.2
SUSE:Manager Client Tools 12-BETAmgr-push5.0.1-4.21.4
SUSE:Manager Client Tools 12-BETAprometheus-blackbox_exporter0.24.0-3.6.3
SUSE:Manager Client Tools 12-BETAprometheus-postgres_exporter0.10.1-3.6.4
SUSE:Manager Client Tools 12-BETApython-hwdata2.3.5-15.12.2
SUSE:Manager Client Tools 12-BETArhnlib5.0.1-24.30.3
SUSE:Manager Client Tools 12-BETAspacecmd5.0.1-41.42.3
SUSE:Manager Client Tools 12-BETAsupportutils-plugin-salt1.2.2-9.9.2
SUSE:Manager Client Tools 12-BETAsupportutils-plugin-susemanager-client5.0.1-9.15.2
SUSE:Manager Client Tools 12-BETAsystem-user-grafana1.0.0-3.7.2
SUSE:Manager Client Tools 12-BETAsystem-user-prometheus1.0.0-3.7.2
SUSE:Manager Client Tools 12-BETAuyuni-common-libs5.0.1-3.33.3
SUSE:Manager Client Tools 15dracut-saltboot0.1.1728559936.c16d4fb-150000.1.56.1
SUSE:Manager Client Tools 15golang-github-prometheus-prometheus2.53.3-150000.3.59.1
SUSE:Manager Client Tools 15grafana9.5.5-150000.1.51.1
SUSE:Manager Client Tools 15grafana10.4.13-150000.1.66.1
SUSE:Manager Client Tools 15spacecmd5.0.11-150000.3.130.1
SUSE:Manager Client Tools 15supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Manager Client Tools 15supportutils-plugin-susemanager-client5.0.4-150000.3.27.1
SUSE:Manager Client Tools 15uyuni-tools0.1.28-150000.1.16.1
SUSE:Manager Client Tools 15-BETAansible2.9.27-159000.3.9.1
SUSE:Manager Client Tools 15-BETAdracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE:Manager Client Tools 15-BETAgolang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE:Manager Client Tools 15-BETAgolang-github-boynux-squid_exporter1.6-159000.4.9.1
SUSE:Manager Client Tools 15-BETAgolang-github-lusitaniae-apache_exporter1.0.0-159000.4.12.1
SUSE:Manager Client Tools 15-BETAgolang-github-prometheus-prometheus2.45.0-159000.6.33.1
SUSE:Manager Client Tools 15-BETAgrafana9.5.8-159000.4.24.1
SUSE:Manager Client Tools 15-BETAmgr-push5.0.1-159000.4.21.1
SUSE:Manager Client Tools 15-BETAprometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE:Manager Client Tools 15-BETAprometheus-postgres_exporter0.10.1-159000.3.6.1
SUSE:Manager Client Tools 15-BETApython-hwdata2.3.5-159000.5.13.1
SUSE:Manager Client Tools 15-BETApython-pyvmomi6.7.3-159000.3.6.1
SUSE:Manager Client Tools 15-BETArhnlib5.0.1-159000.6.30.1
SUSE:Manager Client Tools 15-BETAspacecmd5.0.1-159000.6.42.1
SUSE:Manager Client Tools 15-BETAspacewalk-client-tools5.0.1-159000.6.48.1
SUSE:Manager Client Tools 15-BETAsupportutils-plugin-salt1.2.2-159000.5.9.1
SUSE:Manager Client Tools 15-BETAsupportutils-plugin-susemanager-client5.0.1-159000.6.15.1
SUSE:Manager Client Tools 15-BETAuyuni-common-libs5.0.1-159000.3.33.1
SUSE:Manager Client Tools 15-BETAuyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE:Manager Client Tools Beta for SLE Micro 5dracut-saltboot0.1.1681904360.84ef141-159000.3.30.1
SUSE:Manager Client Tools Beta for SLE Micro 5golang-github-QubitProducts-exporter_exporter0.4.0-159000.4.6.1
SUSE:Manager Client Tools Beta for SLE Micro 5prometheus-blackbox_exporter0.24.0-159000.3.6.1
SUSE:Manager Client Tools Beta for SLE Micro 5uyuni-proxy-systemd-services5.0.1-159000.3.9.1
SUSE:Manager Client Tools for SLE Micro 5dracut-saltboot0.1.1728559936.c16d4fb-150000.1.56.1
SUSE:Manager Client Tools for SLE Micro 5uyuni-tools0.1.28-150000.1.16.1
SUSE:Manager Proxy 4.3supportutils-plugin-salt1.2.3-150000.3.16.1
SUSE:Manager Server 4.3supportutils-plugin-salt1.2.3-150000.3.16.1
Ubuntu:16.04:LTSgrafanano fix
openSUSE:Leap 15.4grafana9.5.5-150200.3.44.1
openSUSE:Leap 15.5grafana9.5.5-150200.3.44.1
openSUSE:Leap 15.6dracut-saltboot0.1.1728559936.c16d4fb-150000.1.56.1
openSUSE:Leap 15.6golang-github-prometheus-promu0.17.0-150000.3.24.1
openSUSE:Leap 15.6grafana10.4.13-150200.3.59.1
openSUSE:Leap 15.6spacecmd5.0.11-150000.3.130.1
openSUSE:Leap 15.6supportutils-plugin-salt1.2.3-150000.3.16.1
openSUSE:Leap 15.6supportutils-plugin-susemanager-client5.0.4-150000.3.27.1
openSUSE:Tumbleweedgrafana10.0.1-1.1