VDB
RHSA-2022%3A6317
RHSA-2022%3A6317
PUBLISHED
CVSS 7.300000190734863 HIGH
An authentication bypass was found in grafana. An attacker on the network is able to view and delete snapshots by accessing a literal path.
Risk Scores
CVSS 3.1
7.300000190734863
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | openshift4/ose-pod@sha256:51e7f4020046161ba50363cd640644527d183dbf15e932132965758ae6dd187f_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-pod@sha256:51e7f4020046161ba50363cd640644527d183dbf15e932132965758ae6dd187f_arm64 |
| Red Hat | openshift4/ose-must-gather@sha256:dd4dc4405a36b0d21bdb6f276ba528392a20f84ae6cf68b7ac38620ef7c95271_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-must-gather@sha256:dd4dc4405a36b0d21bdb6f276ba528392a20f84ae6cf68b7ac38620ef7c95271_amd64 |
| Red Hat | openshift4/ose-docker-registry@sha256:3aa224ed44e308ff45b92f37a2e48925e1fb65e59f4942b380aa79cc7fd991f9_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-docker-registry@sha256:3aa224ed44e308ff45b92f37a2e48925e1fb65e59f4942b380aa79cc7fd991f9_arm64 |
| Red Hat | openshift4/ose-baremetal-installer-rhel8@sha256:2bf0fd75e6f7109ea97e38a973a9f07b26572b92a262cb16b2d079c5cfa11a0d_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-baremetal-installer-rhel8@sha256:2bf0fd75e6f7109ea97e38a973a9f07b26572b92a262cb16b2d079c5cfa11a0d_amd64 |
| Red Hat | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:c4757321de89ac13d76e895465e6d16cbde96347217b874c79bab0bbef7172b7_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-openstack-cloud-controller-manager-rhel8@sha256:c4757321de89ac13d76e895465e6d16cbde96347217b874c79bab0bbef7172b7_arm64 |
| Red Hat | openshift4/ose-tools-rhel8@sha256:3a07c8795b575867f5137685133158e3aeb24d514263e80faf832b1df147b713_s390x as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-tools-rhel8@sha256:3a07c8795b575867f5137685133158e3aeb24d514263e80faf832b1df147b713_s390x |
| Red Hat | openshift4/ose-cluster-kube-scheduler-operator@sha256:a4c725ade1534595033244d98e10659e3ad35b02e9e008062df0c3d2761ff055_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cluster-kube-scheduler-operator@sha256:a4c725ade1534595033244d98e10659e3ad35b02e9e008062df0c3d2761ff055_arm64 |
| Red Hat | openshift4/ose-machine-api-operator@sha256:16f8710f83c98a9d363e83c0948ec62b150be8ceace3962b3d00e0a4b4aed5c4_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | * |
| Red Hat | openshift4/ose-jenkins-agent-base@sha256:fc1339e38fba3bdfac29a6cdfe9073564ff05122aeaaa6740f80cd7845e4c348_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-jenkins-agent-base@sha256:fc1339e38fba3bdfac29a6cdfe9073564ff05122aeaaa6740f80cd7845e4c348_arm64 |
| Red Hat | openshift4/ose-service-ca-operator@sha256:b9f27071c6e452ccd9dea60daafbb7e75867c4091d99f8683065a522dca63007_s390x as a component of Red Hat OpenShift Container Platform 4.9 | * |
| Red Hat | openshift4/ose-etcd@sha256:580bba4b73984bff6981926de5f4f29cc9a092d0003ad0678fda36ef7e6a7828_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-etcd@sha256:580bba4b73984bff6981926de5f4f29cc9a092d0003ad0678fda36ef7e6a7828_amd64 |
| Red Hat | openshift4/ose-openshift-apiserver-rhel8@sha256:40ab446eced23e4d62cf5fdc497e79982d6e515b285235026a6802c9c3ecd982_s390x as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-openshift-apiserver-rhel8@sha256:40ab446eced23e4d62cf5fdc497e79982d6e515b285235026a6802c9c3ecd982_s390x |
| Red Hat | openshift4/ose-csi-livenessprobe-rhel8@sha256:5d6d788549224010d955d5da92162269119ec3e9c6f238e2b9ce1c1c5205340e_s390x as a component of Red Hat OpenShift Container Platform 4.9 | * |
| Red Hat | openshift4/ose-cluster-storage-operator@sha256:9b07cd2bda42cb3e7e9cb1eb936418a78519d02cd71d7cbb4074a43cc8211790_ppc64le as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cluster-storage-operator@sha256:9b07cd2bda42cb3e7e9cb1eb936418a78519d02cd71d7cbb4074a43cc8211790_ppc64le |
| Red Hat | openshift4/ose-thanos-rhel8@sha256:8b42c89f45bdbae49ae58cab198136a5458af3103b169a865497d19a32411020_arm64 as a component of Red Hat OpenShift Container Platform 4.9 | * |
| Red Hat | openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:e3d4d49c5fa75da3129c57694ca5ddfc95a4afffd6a5dbc197b5a95003e18cdc_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-vsphere-csi-driver-operator-rhel8@sha256:e3d4d49c5fa75da3129c57694ca5ddfc95a4afffd6a5dbc197b5a95003e18cdc_amd64 |
| Red Hat | openshift4/ose-prometheus-alertmanager@sha256:a996e7903aa9862c463e211a7eb7d09602155996060a2bdf2d6c34203a714c9a_s390x as a component of Red Hat OpenShift Container Platform 4.9 | * |
| Red Hat | openshift4/ose-cluster-update-keys@sha256:627f57e6eebc01e7601974ebaf9927d66771b03cb3c6a94a5182bca863f39103_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cluster-update-keys@sha256:627f57e6eebc01e7601974ebaf9927d66771b03cb3c6a94a5182bca863f39103_amd64 |
| Red Hat | openshift4/ose-cluster-storage-operator@sha256:b4ff7babcb59ddcb803d227f52c59d67311c7ea6ef3bcf08de747c14ffbc29a8_s390x as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-cluster-storage-operator@sha256:b4ff7babcb59ddcb803d227f52c59d67311c7ea6ef3bcf08de747c14ffbc29a8_s390x |
| Red Hat | openshift4/ose-insights-rhel8-operator@sha256:1842a3770c9702cebb342e12bf1627c60258ecdbdd30cc44f8c42be813add5f8_amd64 as a component of Red Hat OpenShift Container Platform 4.9 | openshift4/ose-insights-rhel8-operator@sha256:1842a3770c9702cebb342e12bf1627c60258ecdbdd30cc44f8c42be813add5f8_amd64 |
…and 512 more
Timeline
- Sep 12, 2022 CVE Published
- Mar 18, 2026 CVE Updated
- May 1, 2026 Distribution Patch
- May 1, 2026 Distribution Patch
- May 1, 2026 Security Advisory
- May 1, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2022:6317 advisory
- https://access.redhat.com/security/updates/classification/#important advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1996013 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2011063 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2096508 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2097724 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2101092 issue
- https://bugzilla.redhat.com/show_bug.cgi?id=2101794 issue
- https://issues.redhat.com/browse/OCPBUGS-410 advisory
- https://issues.redhat.com/browse/OCPBUGS-420 advisory
- https://issues.redhat.com/browse/OCPBUGS-443 advisory
- https://issues.redhat.com/browse/OCPBUGS-459 advisory
- https://issues.redhat.com/browse/OCPBUGS-508 advisory
- https://issues.redhat.com/browse/OCPBUGS-572 advisory
- https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_6317.json advisory
- https://access.redhat.com/security/cve/CVE-2021-39226 advisory
- https://www.cve.org/CVERecord?id=CVE-2021-39226 advisory
- https://nvd.nist.gov/vuln/detail/CVE-2021-39226 advisory
- https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9 advisory
- https://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/ advisory
…and 1 more