Back to the CVE list
CVE-2021-39226 CISA KEV · Actively exploited

grafana: Snapshot authentication bypass

CVSS score

7.3

EPSS probability

%99.9

Risk score

14.6

Published

5 y ago

OverviewPublic Exploits (1)NewsroomVulnerability Timeline
A patch is available only for some products or versions

Kanıt listesindeki ürün ve sürüm eşleşmesini kontrol edin; bazı varyantlar hâlâ etkileniyor olabilir.

Impact on My Inventory

Only the personal products you have added to your account are assessed; an organisation's inventory does not appear here.

Checking session…

Vulnerability description

DayBreach CVE AI Research

CVE-2021-39226 has vendor, distribution, patch and security-source records on file. We can compare them and prepare an explanation linked to the evidence.

An authentication bypass was found in grafana. An attacker on the network is able to view and delete snapshots by accessing a literal path.

IMPACT: Affected Products and Software

Affected Products

The following products are affected by CVE-2021-39226 vulnerability. Where our threat engine knows the exact affected versions, they are listed below.

IDVENDORPRODUCTACTION
1Red Hatopenshift_service_mesh_1:servicemesh-grafana View
2Red Hatopenshift_service_mesh_1:servicemesh-grafana-prometheus View
3Red Hatopenshift_service_mesh_1:servicemesh-grafana.src View
4Red Hatopenshift_service_mesh_2.0:servicemesh-grafana View
5Red Hatopenshift_service_mesh_2.0:servicemesh-grafana-prometheus View
6Red Hatopenshift_service_mesh_2.0:servicemesh-grafana.src View
7Red Hatred_hat_ceph_storage_2:grafana View
8Red Hatred_hat_ceph_storage_2:grafana.src View
9Red Hatred_hat_ceph_storage_3:grafana View
10Red Hatred_hat_ceph_storage_3:grafana-container View
11Red Hatred_hat_ceph_storage_3:grafana.src View
12Red Hatred_hat_ceph_storage_4:rhceph/rhceph-4-dashboard-rhel8 View
13Red Hatred_hat_storage_3:grafana View
14Red Hatred_hat_storage_3:grafana.src View
15Red Hat7Server-RH7-RHOSE-3.11:openshift3/grafana@sha256:d8f999ad836d0c4699e68e8712ca182978ece8aacec9ad620f5b87033b3add6e_amd64 View
16Red Hat8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:41b2376c08f44b599eeef0bf55e16be2cacfdf1cc668b806c36753cc68287a49_ppc64le View
17Red Hat8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:481ba4a1d265bff9f0b43aa147f0b4f8dddc1f4c28602a63707018763cd1fab4_s390x View
18Red Hat8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:bca7251b67e28bef37f543568b906bf27f72a01d65f5335d768ea3fa810d0a3c_amd64 View
19Red Hat8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:f3b5fec3b655fe23506b2daf33c3fe2b5c7810a3272681a34e89d88e4a0bedc8_arm64 View
20Red Hat8Base-RHOSE-4.6:openshift4/ose-grafana@sha256:31d651e535fe2013884223bd0bf253b399abdd6192c5e33d423fe02187dff71c_ppc64le View
21Red Hat8Base-RHOSE-4.6:openshift4/ose-grafana@sha256:325f6f18fe20cef293822a76ddd463f7d2535a2d0deacabe4765014b9d48bbb5_amd64 View
22Red Hat8Base-RHOSE-4.6:openshift4/ose-grafana@sha256:c8e534c343a2262b2b896229ab434088b165503fbebc294bb53ff9b249271eb3_s390x View
23Red Hat8Base-RHOSE-4.7:openshift4/ose-grafana@sha256:045d60552ddf9c065b40d6c39b8333e74f34fe52b0284f0c6df7c21a0dd5db1c_ppc64le View
24Red Hat8Base-RHOSE-4.7:openshift4/ose-grafana@sha256:41e960f1a3f3ad89bf4736541f7bcfaa96ddbf3295a5e616354d1e5604525b0e_s390x View
25Red Hat8Base-RHOSE-4.7:openshift4/ose-grafana@sha256:ebbc9c57224373589a82bbd4445db5f5b8450950d211b2c516f7e921f25353cc_amd64 View
26Red Hat8Base-RHOSE-4.8:openshift4/ose-grafana@sha256:534ff9bcd7eb2845780c29020b8037ebd85b6114cb637ecf93eafb7605278f29_s390x View
27Red Hat8Base-RHOSE-4.8:openshift4/ose-grafana@sha256:54533be876d5e68b064eab3ccc7bed86a3277fcafb27e9e4c69c9f7249bb529c_amd64 View
28Red Hat8Base-RHOSE-4.8:openshift4/ose-grafana@sha256:dec37a0bd7196a1560f440432d3051e2f8375790e15350fe1cf4ec83e89f44b1_ppc64le View
29Red Hat8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:4c10b04c02d66e56c11c06c9ed044afee6d5d9b05206bd3eff640779a436a34b_ppc64le View
30Red Hat8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:9bb43d5d1c7911ee42002d2a5037d1f2ab2654c7a522c1fb6e5b7cc9f64ba833_s390x View
31Red Hat8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:cb2b28433b43f475f6ca1af596a6d3363b0d3ce764e6d230d73802be7574a88f_amd64 View
32Red Hat8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:ff61491c6c5c56b55928811158f2221b09e8eda06f3dabed6c189f7fc7c81fbf_arm64 View
33Red HatAppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.aarch64 View
34Red HatAppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.ppc64le View
35Red HatAppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.s390x View
36Red HatAppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.src View
37Red HatAppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.x86_64 View
38Red HatAppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.aarch64 View
39Red HatAppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.ppc64le View
40Red HatAppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.s390x View
41Red HatAppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.x86_64 View
42Red HatAppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.aarch64 View
43Red HatAppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.ppc64le View
44Red HatAppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.s390x View
45Red HatAppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.x86_64 View
46Red HatAppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.aarch64 View
47Red HatAppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.ppc64le View
48Red HatAppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.s390x View
49Red HatAppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.x86_64 View
50Red HatAppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.aarch64 View
51Red HatAppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.ppc64le View
52Red HatAppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.s390x View
53Red HatAppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.x86_64 View
54Red HatAppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.aarch64 View
55Red HatAppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.ppc64le View
56Red HatAppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.s390x View
57Red HatAppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.x86_64 View
58Red HatAppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.aarch64 View
59Red HatAppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.ppc64le View
60Red HatAppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.s390x View
61Red HatAppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.x86_64 View
62Red HatAppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.aarch64 View
63Red HatAppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.ppc64le View
64Red HatAppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.s390x View
65Red HatAppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.x86_64 View
66Red HatAppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.aarch64 View
67Red HatAppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.ppc64le View
68Red HatAppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.s390x View
69Red HatAppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.x86_64 View
70Red HatAppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.aarch64 View
71Red HatAppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.ppc64le View
72Red HatAppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.s390x View
73Red HatAppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.x86_64 View
74Red HatAppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.aarch64 View
75Red HatAppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.ppc64le View
76Red HatAppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.s390x View
77Red HatAppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.x86_64 View
78Red HatAppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.aarch64 View
79Red HatAppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.ppc64le View
80Red HatAppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.s390x View
81Red HatAppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.x86_64 View
82Red HatAppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.aarch64 View
83Red HatAppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.ppc64le View
84Red HatAppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.s390x View
85Red HatAppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.x86_64 View
86Red HatAppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.aarch64 View
87Red HatAppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.ppc64le View
88Red HatAppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.s390x View
89Red HatAppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.x86_64 View
90Red HatAppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.aarch64 View
91Red HatAppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.ppc64le View
92Red HatAppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.s390x View
93Red HatAppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.src View
94Red HatAppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.x86_64 View
95Red HatAppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.aarch64 View
96Red HatAppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.ppc64le View
97Red HatAppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.s390x View
98Red HatAppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.x86_64 View
99Red HatAppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.aarch64 View
100Red HatAppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.ppc64le View
101Red HatAppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.s390x View
102Red HatAppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.x86_64 View
103Red HatAppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.aarch64 View
104Red HatAppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.ppc64le View
105Red HatAppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.s390x View
106Red HatAppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.x86_64 View
107Red HatAppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.aarch64 View
108Red HatAppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.ppc64le View
109Red HatAppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.s390x View
110Red HatAppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.x86_64 View
111Red HatAppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.aarch64 View
112Red HatAppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.ppc64le View
113Red HatAppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.s390x View
114Red HatAppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.x86_64 View
115Red HatAppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.aarch64 View
116Red HatAppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.ppc64le View
117Red HatAppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.s390x View
118Red HatAppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.x86_64 View
119Red HatAppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.aarch64 View
120Red HatAppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.ppc64le View
121Red HatAppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.s390x View
122Red HatAppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.x86_64 View
123Red HatAppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.aarch64 View
124Red HatAppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.ppc64le View
125Red HatAppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.s390x View
126Red HatAppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.x86_64 View
127Red HatAppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.aarch64 View
128Red HatAppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.ppc64le View
129Red HatAppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.s390x View
130Red HatAppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.x86_64 View
131Red HatAppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.aarch64 View
132Red HatAppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.ppc64le View
133Red HatAppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.s390x View
134Red HatAppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.x86_64 View
135Red HatAppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.aarch64 View
136Red HatAppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.ppc64le View
137Red HatAppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.s390x View
138Red HatAppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.x86_64 View
139Red HatAppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.aarch64 View
140Red HatAppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.ppc64le View
141Red HatAppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.s390x View
142Red HatAppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.x86_64 View
143Red HatAppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.aarch64 View
144Red HatAppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.ppc64le View
145Red HatAppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.s390x View
146Red HatAppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.x86_64 View
147Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.aarch64 View
148Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.ppc64le View
149Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.s390x View
150Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.src View
151Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.x86_64 View
152Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.aarch64 View
153Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.ppc64le View
154Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.s390x View
155Red HatAppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.x86_64 View
156Grafana LabsGrafana View
Total affected vendors: 2|Products: 156

RED HAT CSAF/VEX: Product Impact Check

Does this CVE affect my Red Hat product?

The results come directly from the Red Hat CSAF VEX product status; they are not estimates.

Affected

Red Hat bu ürün sürümünü etkilenen olarak işaretliyor.

Red Hat fixes

For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/3.11/upgrading/index.html For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for moderate instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

SCORING: CVSS from Multiple Sources

CVSS Scores

The Common Vulnerability Scoring System is a standardised framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from several sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
7.3cvss_v3HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LRed Hat

Patch and Remediation Guide

Solution & Remediation Advisory

Partial patch

18 düzeltme kanıtı bulundu; en az 14 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

redhat

For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/3.11/upgrading/index.html

Open source
redhat

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for moderate instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

Open source
redhat

For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html

Open source
redhat

For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

Open source
redhat

For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

Open source
redhat

For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Open source
redhat

Out of support scope

redhat

Will not fix

redhat

Affected

Confirm the affected product and version against the source evidence above.
Restrict access to internet-facing services and apply network segmentation.
Apply the official update named in the evidence only to the matching product and version.
Monitor server logs and network endpoints for signs of anomalous execution.

Public exploit and active exploitation status

Verified exploit intelligence

CVE-2021-39226 : the database holds 1 public PoC/exploit sources for it. For direct links to the sources, open the Public Exploits tab.

Weakness Classification and Attack Patterns (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorises the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-39226 is associated with the following CWEs:

CWE-639: Common Weakness Enumeration Entry CWE-639

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-39226 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Attack Vector and Accessibility

ExposureAğ üzerinden
PermissionsGerekmiyor
UserGerekmiyor

Official Sources and Advisories

Canonical URLvendor-advisoryRHBZ#2011063vendor-advisoryhttps://www.cve.org/CVERecord?id=CVE-2021-39226vendor-advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2021-39226vendor-advisoryhttps://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9vendor-advisoryhttps://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/vendor-advisoryhttps://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisoryFor OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/3.11/upgrading/index.htmlpatchFor OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for moderate instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.htmlpatchFor OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.htmlpatch

CVSS Vector Radar Chart

7.3 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityLow

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone required
User InteractionNone required
Confidentiality (Gizlilik)Low
Integrity (Bütünlük)None
Availability (Erişilebilirlik)Low

Kısmi yama

18 düzeltme kanıtı bulundu; en az 14 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

Follow the vendor

RH
Red Hat logo
Red Hat
GL
Grafana Labs logo
Grafana Labs

Weakness Type (CWE & CAPEC)

CWE-639

Similar Vulnerabilities

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free keyDocumentation
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-39226"