Grafana up to 8.5.12/9.1.5 Proxy authentication spoofing

Summaryinfo

A vulnerability marked as critical has been reported in Grafana up to 8.5.12/9.1.5. Affected by this issue is some unknown functionality of the component Proxy. Performing a manipulation results in authentication spoofing. This vulnerability is cataloged as CVE-2022-35957. It is possible to initiate the attack remotely. There is no exploit available. It is suggested to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Grafana up to 8.5.12/9.1.5. This affects an unknown code of the component Proxy. The manipulation with an unknown input leads to a authentication spoofing vulnerability. CWE is classifying the issue as CWE-290. This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

Grafana is an open-source platform for monitoring and observability. Versions prior to 9.1.6 and 8.5.13 are vulnerable to an escalation from admin to server admin when auth proxy is used, allowing an admin to take over the server admin account and gain full control of the grafana instance. All installations should be upgraded as soon as possible. As a workaround deactivate auth proxy following the instructions at: https://grafana.com/docs/grafana/latest/setup-grafana/configure-security/configure-authentication/auth-proxy/

The weakness was shared 09/21/2022 as GHSA-ff5c-938w-8c9q. It is possible to read the advisory at github.com. This vulnerability is uniquely identified as CVE-2022-35957 since 07/15/2022. The technical details are unknown and an exploit is not publicly available.

The vulnerability scanner Nessus provides a plugin with the ID 211148 (Fedora 38 : grafana (2022-8e5d214237)), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 8.5.13 or 9.1.6 eliminates this vulnerability.

The vulnerability is also documented in the databases at Tenable (211148) and EUVD (EUVD-2024-1599). Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• Grafana

Version

• 8.5.0
• 8.5.1
• 8.5.2
• 8.5.3
• 8.5.4
• 8.5.5
• 8.5.6
• 8.5.7
• 8.5.8
• 8.5.9
• 8.5.10
• 8.5.11
• 8.5.12
• 9.1.0
• 9.1.1
• 9.1.2
• 9.1.3
• 9.1.4
• 9.1.5

License

• open-source

Website

• Product: https://github.com/grafana/grafana/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion