VDB
RHSA-2022%3A6262
RHSA-2022%3A6262
PUBLISHED
CVSS 7.300000190734863 HIGH
An authentication bypass was found in grafana. An attacker on the network is able to view and delete snapshots by accessing a literal path.
Risk Scores
CVSS 3.1
7.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:550eb1be3088cf84c978f224dc834eba31106ae65dfa36055a8e6c9fd1da6df1_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:550eb1be3088cf84c978f224dc834eba31106ae65dfa36055a8e6c9fd1da6df1_ppc64le, *, openshift4/ose-aws-pod-identity-webhook-rhel8@sha256:550eb1be3088cf84c978f224dc834eba31106ae65dfa36055a8e6c9fd1da6df1_ppc64le |
| Red Hat | openshift4/ose-csi-external-attacher@sha256:47bde4dd447cb6cfc6c8ecc86236b430347f730eaa2a6f2dab2cb0e89cae4852_s390x as a component of Red Hat OpenShift Container Platform 4.6 | *, *, openshift4/ose-csi-external-attacher@sha256:47bde4dd447cb6cfc6c8ecc86236b430347f730eaa2a6f2dab2cb0e89cae4852_s390x |
| Red Hat | openshift4/ose-cluster-openshift-apiserver-operator@sha256:ab1ae389b548507558759ddaa304fb095904cdda4c7fe7561b81df46414946b8_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | *, *, * |
| Red Hat | openshift4/ose-cluster-image-registry-operator@sha256:f7a3cb2de7b5ebe107d2c1de47aa8d1f557e7107e4afa3c21b6638c8b78bffa3_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | *, *, * |
| Red Hat | openshift4/ose-csi-external-snapshotter@sha256:2c99406d6e34268315be6fdbb37bf6c4ec34fa5670c7b38de37e1cefeb2a0268_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | *, *, * |
| Red Hat | openshift4/ose-cluster-node-tuning-operator@sha256:6d3dbc1c3e028a9396273f528ffa487977101aaf7f58e7acedc996ef6fdc70cb_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-node-tuning-operator@sha256:6d3dbc1c3e028a9396273f528ffa487977101aaf7f58e7acedc996ef6fdc70cb_s390x, openshift4/ose-cluster-node-tuning-operator@sha256:6d3dbc1c3e028a9396273f528ffa487977101aaf7f58e7acedc996ef6fdc70cb_s390x, * |
| Red Hat | openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:2b3fbe16ca176ab2cfbe80ad6ce5baa3318b175b2a66bfb243eb059701831e75_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:2b3fbe16ca176ab2cfbe80ad6ce5baa3318b175b2a66bfb243eb059701831e75_amd64, openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:2b3fbe16ca176ab2cfbe80ad6ce5baa3318b175b2a66bfb243eb059701831e75_amd64, openshift4/ose-aws-ebs-csi-driver-rhel8-operator@sha256:2b3fbe16ca176ab2cfbe80ad6ce5baa3318b175b2a66bfb243eb059701831e75_amd64 |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:24a71934662d413b77a1084b1ef687f910ee470a547797760a219f033405a7c7_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-prometheus-alertmanager@sha256:24a71934662d413b77a1084b1ef687f910ee470a547797760a219f033405a7c7_ppc64le, openshift4/ose-prometheus-alertmanager@sha256:24a71934662d413b77a1084b1ef687f910ee470a547797760a219f033405a7c7_ppc64le, openshift4/ose-prometheus-alertmanager@sha256:24a71934662d413b77a1084b1ef687f910ee470a547797760a219f033405a7c7_ppc64le |
| Red Hat | openshift4/ose-kube-state-metrics@sha256:ffca005d6f777710e2a44ff7b8a46db18a3bffbce3d05da760ba9bcafc85dafd_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-kube-state-metrics@sha256:ffca005d6f777710e2a44ff7b8a46db18a3bffbce3d05da760ba9bcafc85dafd_s390x, openshift4/ose-kube-state-metrics@sha256:ffca005d6f777710e2a44ff7b8a46db18a3bffbce3d05da760ba9bcafc85dafd_s390x, openshift4/ose-kube-state-metrics@sha256:ffca005d6f777710e2a44ff7b8a46db18a3bffbce3d05da760ba9bcafc85dafd_s390x |
| Red Hat | openshift4/driver-toolkit-rhel8@sha256:d010fd6443db2f8f3451b7916ae7f06fe4711452e5650b240ed8312fe38e7f49_s390x as a component of Red Hat OpenShift Container Platform 4.6 | *, openshift4/driver-toolkit-rhel8@sha256:d010fd6443db2f8f3451b7916ae7f06fe4711452e5650b240ed8312fe38e7f49_s390x, * |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:0809ec8731814b916852bbc4cd35a93f0210dadebbfcb1785e8f92d4988a78b2_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-prometheus-alertmanager@sha256:0809ec8731814b916852bbc4cd35a93f0210dadebbfcb1785e8f92d4988a78b2_amd64, openshift4/ose-prometheus-alertmanager@sha256:0809ec8731814b916852bbc4cd35a93f0210dadebbfcb1785e8f92d4988a78b2_amd64, * |
| Red Hat | openshift4/ose-cluster-policy-controller-rhel8@sha256:703896bb353630c5ac6f9b67353e68d0191b1eb27b505da6b0c17f10c7bf0734_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-policy-controller-rhel8@sha256:703896bb353630c5ac6f9b67353e68d0191b1eb27b505da6b0c17f10c7bf0734_ppc64le, openshift4/ose-cluster-policy-controller-rhel8@sha256:703896bb353630c5ac6f9b67353e68d0191b1eb27b505da6b0c17f10c7bf0734_ppc64le, openshift4/ose-cluster-policy-controller-rhel8@sha256:703896bb353630c5ac6f9b67353e68d0191b1eb27b505da6b0c17f10c7bf0734_ppc64le |
| Red Hat | openshift4/ose-cluster-monitoring-operator@sha256:e1a55ec8860d804b271824d08481f87d87c69b277208d32d36183c89155a5d1c_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-monitoring-operator@sha256:e1a55ec8860d804b271824d08481f87d87c69b277208d32d36183c89155a5d1c_s390x, openshift4/ose-cluster-monitoring-operator@sha256:e1a55ec8860d804b271824d08481f87d87c69b277208d32d36183c89155a5d1c_s390x, openshift4/ose-cluster-monitoring-operator@sha256:e1a55ec8860d804b271824d08481f87d87c69b277208d32d36183c89155a5d1c_s390x |
| Red Hat | openshift4/ose-service-ca-operator@sha256:241c64ff63e13f19622c6962c3255f9a53584f2d42e1aaba116af89d3c1c6399_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | *, *, openshift4/ose-service-ca-operator@sha256:241c64ff63e13f19622c6962c3255f9a53584f2d42e1aaba116af89d3c1c6399_amd64 |
| Red Hat | openshift4/ose-sdn-rhel8@sha256:fc4a3059d24278e5447f5ebca678baecd2cef2217e7b8704d0fa12e58c2ebfcb_s390x as a component of Red Hat OpenShift Container Platform 4.6 | *, openshift4/ose-sdn-rhel8@sha256:fc4a3059d24278e5447f5ebca678baecd2cef2217e7b8704d0fa12e58c2ebfcb_s390x, openshift4/ose-sdn-rhel8@sha256:fc4a3059d24278e5447f5ebca678baecd2cef2217e7b8704d0fa12e58c2ebfcb_s390x |
| Red Hat | openshift4/ovirt-csi-driver-rhel8@sha256:04158fea43dd5a4d4c8d73d43415dd384cff432d32581f1cda423020cb0b6e45_ppc64le as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ovirt-csi-driver-rhel8@sha256:04158fea43dd5a4d4c8d73d43415dd384cff432d32581f1cda423020cb0b6e45_ppc64le, *, openshift4/ovirt-csi-driver-rhel8@sha256:04158fea43dd5a4d4c8d73d43415dd384cff432d32581f1cda423020cb0b6e45_ppc64le |
| Red Hat | openshift4/ose-cluster-samples-operator@sha256:388bbd99394f5ddb3e47446aebef247e2beb4e94c821e3415000219149664d30_amd64 as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-cluster-samples-operator@sha256:388bbd99394f5ddb3e47446aebef247e2beb4e94c821e3415000219149664d30_amd64, *, openshift4/ose-cluster-samples-operator@sha256:388bbd99394f5ddb3e47446aebef247e2beb4e94c821e3415000219149664d30_amd64 |
| Red Hat | openshift4/ose-oauth-server-rhel8@sha256:dc9204a16e55bdc42c084c620e09f38225fe887a46a4716a5ca77ed91b3d1081_s390x as a component of Red Hat OpenShift Container Platform 4.6 | *, *, openshift4/ose-oauth-server-rhel8@sha256:dc9204a16e55bdc42c084c620e09f38225fe887a46a4716a5ca77ed91b3d1081_s390x |
| Red Hat | openshift4/ose-installer@sha256:ecbb951e20d0d9398693094704c2121ca764e9831e76014b2ba749f396b91d88_s390x as a component of Red Hat OpenShift Container Platform 4.6 | openshift4/ose-installer@sha256:ecbb951e20d0d9398693094704c2121ca764e9831e76014b2ba749f396b91d88_s390x, openshift4/ose-installer@sha256:ecbb951e20d0d9398693094704c2121ca764e9831e76014b2ba749f396b91d88_s390x, openshift4/ose-installer@sha256:ecbb951e20d0d9398693094704c2121ca764e9831e76014b2ba749f396b91d88_s390x |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:9400bd285232debf99e9eb7549ab9f2f7f90fd80184aeb25fef47d53c17ecdd6_s390x as a component of Red Hat OpenShift Container Platform 4.6 | *, openshift4/ose-prometheus-alertmanager@sha256:9400bd285232debf99e9eb7549ab9f2f7f90fd80184aeb25fef47d53c17ecdd6_s390x, openshift4/ose-prometheus-alertmanager@sha256:9400bd285232debf99e9eb7549ab9f2f7f90fd80184aeb25fef47d53c17ecdd6_s390x |
…and 713 more
Timeline
- Sep 9, 2022 CVE Published
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Distribution Patch
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Apr 25, 2026 Security Advisory
- Jun 19, 2026 CVE Updated
References
- https://access.redhat.com/errata/RHSA-2022:6262 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2011063 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2056343 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2106897 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2107342 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2118489 issue
- https://issues.redhat.com/browse/OCPBUGS-25 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6262.json advisory
- https://access.redhat.com/security/cve/CVE-2021-39226 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-39226 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-39226 advisory
- https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9 advisory
- https://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/ advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit
- https://access.redhat.com/security/cve/CVE-2022-30631 advisory
- https://www.cve.org/CVERecord?id=CVE-2022-30631 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2022-30631 advisory
- https://go.dev/issue/53168 advisory
- https://groups.google.com/g/golang-announce/c/nqrv9fbR0zE advisory