Grafana patches vulnerability that could lead to admin account takeover

guest · Jul 22, 2022

Open source analytics platform fixes bug that could lead to authentication bypass, privilege escalation
July 22, 2022

Malicious actors could take over an administrator account in Grafana due to a vulnerability in its OAuth login function, researchers have warned.

The security flaw, tracked as CVE-2022-31107, could allow an attacker to access another user’s account on the open source analytics platform.
Click to expand...

Discovered by a team of researchers from HTTPVoid, the bug, which resides in the platform’s login function, “opens the door for attackers to elevate their privileges through cross-origin attacks against administrators on systems running vulnerable versions of the open source platform”.

An attacker could therefore potentially gain access to an admin account.
Click to expand...

The vulnerability, which is present in versions 5.3 until 9.0.3, 8.5.9, 8.4.10, and 8.3.10, has been patched by Grafana in versions 9.0.3, 8.5.9, 8.4.10, and 8.3.10.

“As a workaround, concerned users can disable OAuth login to their Grafana instance, or ensure that all users authorized to log in via OAuth have a corresponding user account in Grafana linked to their email address,” the vulnerability report adds.
Click to expand...

Log in or Sign up

Grafana patches vulnerability that could lead to admin account takeover

guest Guest

Log in or Sign up

Grafana patches vulnerability that could lead to admin account takeover

guest Guest

Useful Searches