CVE-2021-39226 CISA KEV · Aktif Sömürülüyor

grafana: Snapshot authentication bypass

CVSS Skor

7.3

EPSS İhtimal

%99.9

Risk Skoru

14.6

Yayın

5 yıl önce

Overview (Genel Bakış)Public Exploits (1)Newsroom (Haberler)Vulnerability Timeline

Yama yalnızca bazı ürün veya sürümlerde mevcut

Kanıt listesindeki ürün ve sürüm eşleşmesini kontrol edin; bazı varyantlar hâlâ etkileniyor olabilir.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2021-39226 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

An authentication bypass was found in grafana. An attacker on the network is able to view and delete snapshots by accessing a literal path.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2021-39226 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

ID	VENDOR	PRODUCT	ACTION
1	Red Hat	openshift_service_mesh_1:servicemesh-grafana	İncele
2	Red Hat	openshift_service_mesh_1:servicemesh-grafana-prometheus	İncele
3	Red Hat	openshift_service_mesh_1:servicemesh-grafana.src	İncele
4	Red Hat	openshift_service_mesh_2.0:servicemesh-grafana	İncele
5	Red Hat	openshift_service_mesh_2.0:servicemesh-grafana-prometheus	İncele
6	Red Hat	openshift_service_mesh_2.0:servicemesh-grafana.src	İncele
7	Red Hat	red_hat_ceph_storage_2:grafana	İncele
8	Red Hat	red_hat_ceph_storage_2:grafana.src	İncele
9	Red Hat	red_hat_ceph_storage_3:grafana	İncele
10	Red Hat	red_hat_ceph_storage_3:grafana-container	İncele
11	Red Hat	red_hat_ceph_storage_3:grafana.src	İncele
12	Red Hat	red_hat_ceph_storage_4:rhceph/rhceph-4-dashboard-rhel8	İncele
13	Red Hat	red_hat_storage_3:grafana	İncele
14	Red Hat	red_hat_storage_3:grafana.src	İncele
15	Red Hat	7Server-RH7-RHOSE-3.11:openshift3/grafana@sha256:d8f999ad836d0c4699e68e8712ca182978ece8aacec9ad620f5b87033b3add6e_amd64	İncele
16	Red Hat	8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:41b2376c08f44b599eeef0bf55e16be2cacfdf1cc668b806c36753cc68287a49_ppc64le	İncele
17	Red Hat	8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:481ba4a1d265bff9f0b43aa147f0b4f8dddc1f4c28602a63707018763cd1fab4_s390x	İncele
18	Red Hat	8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:bca7251b67e28bef37f543568b906bf27f72a01d65f5335d768ea3fa810d0a3c_amd64	İncele
19	Red Hat	8Base-RHOSE-4.10:openshift4/ose-grafana@sha256:f3b5fec3b655fe23506b2daf33c3fe2b5c7810a3272681a34e89d88e4a0bedc8_arm64	İncele
20	Red Hat	8Base-RHOSE-4.6:openshift4/ose-grafana@sha256:31d651e535fe2013884223bd0bf253b399abdd6192c5e33d423fe02187dff71c_ppc64le	İncele
21	Red Hat	8Base-RHOSE-4.6:openshift4/ose-grafana@sha256:325f6f18fe20cef293822a76ddd463f7d2535a2d0deacabe4765014b9d48bbb5_amd64	İncele
22	Red Hat	8Base-RHOSE-4.6:openshift4/ose-grafana@sha256:c8e534c343a2262b2b896229ab434088b165503fbebc294bb53ff9b249271eb3_s390x	İncele
23	Red Hat	8Base-RHOSE-4.7:openshift4/ose-grafana@sha256:045d60552ddf9c065b40d6c39b8333e74f34fe52b0284f0c6df7c21a0dd5db1c_ppc64le	İncele
24	Red Hat	8Base-RHOSE-4.7:openshift4/ose-grafana@sha256:41e960f1a3f3ad89bf4736541f7bcfaa96ddbf3295a5e616354d1e5604525b0e_s390x	İncele
25	Red Hat	8Base-RHOSE-4.7:openshift4/ose-grafana@sha256:ebbc9c57224373589a82bbd4445db5f5b8450950d211b2c516f7e921f25353cc_amd64	İncele
26	Red Hat	8Base-RHOSE-4.8:openshift4/ose-grafana@sha256:534ff9bcd7eb2845780c29020b8037ebd85b6114cb637ecf93eafb7605278f29_s390x	İncele
27	Red Hat	8Base-RHOSE-4.8:openshift4/ose-grafana@sha256:54533be876d5e68b064eab3ccc7bed86a3277fcafb27e9e4c69c9f7249bb529c_amd64	İncele
28	Red Hat	8Base-RHOSE-4.8:openshift4/ose-grafana@sha256:dec37a0bd7196a1560f440432d3051e2f8375790e15350fe1cf4ec83e89f44b1_ppc64le	İncele
29	Red Hat	8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:4c10b04c02d66e56c11c06c9ed044afee6d5d9b05206bd3eff640779a436a34b_ppc64le	İncele
30	Red Hat	8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:9bb43d5d1c7911ee42002d2a5037d1f2ab2654c7a522c1fb6e5b7cc9f64ba833_s390x	İncele
31	Red Hat	8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:cb2b28433b43f475f6ca1af596a6d3363b0d3ce764e6d230d73802be7574a88f_amd64	İncele
32	Red Hat	8Base-RHOSE-4.9:openshift4/ose-grafana@sha256:ff61491c6c5c56b55928811158f2221b09e8eda06f3dabed6c189f7fc7c81fbf_arm64	İncele
33	Red Hat	AppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.aarch64	İncele
34	Red Hat	AppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.ppc64le	İncele
35	Red Hat	AppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.s390x	İncele
36	Red Hat	AppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.src	İncele
37	Red Hat	AppStream-8.1.0.Z.EUS:grafana-0:6.2.2-7.el8_1.x86_64	İncele
38	Red Hat	AppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.aarch64	İncele
39	Red Hat	AppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.ppc64le	İncele
40	Red Hat	AppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.s390x	İncele
41	Red Hat	AppStream-8.1.0.Z.EUS:grafana-azure-monitor-0:6.2.2-7.el8_1.x86_64	İncele
42	Red Hat	AppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.aarch64	İncele
43	Red Hat	AppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.ppc64le	İncele
44	Red Hat	AppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.s390x	İncele
45	Red Hat	AppStream-8.1.0.Z.EUS:grafana-cloudwatch-0:6.2.2-7.el8_1.x86_64	İncele
46	Red Hat	AppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.aarch64	İncele
47	Red Hat	AppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.ppc64le	İncele
48	Red Hat	AppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.s390x	İncele
49	Red Hat	AppStream-8.1.0.Z.EUS:grafana-debuginfo-0:6.2.2-7.el8_1.x86_64	İncele
50	Red Hat	AppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.aarch64	İncele
51	Red Hat	AppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.ppc64le	İncele
52	Red Hat	AppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.s390x	İncele
53	Red Hat	AppStream-8.1.0.Z.EUS:grafana-elasticsearch-0:6.2.2-7.el8_1.x86_64	İncele
54	Red Hat	AppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.aarch64	İncele
55	Red Hat	AppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.ppc64le	İncele
56	Red Hat	AppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.s390x	İncele
57	Red Hat	AppStream-8.1.0.Z.EUS:grafana-graphite-0:6.2.2-7.el8_1.x86_64	İncele
58	Red Hat	AppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.aarch64	İncele
59	Red Hat	AppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.ppc64le	İncele
60	Red Hat	AppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.s390x	İncele
61	Red Hat	AppStream-8.1.0.Z.EUS:grafana-influxdb-0:6.2.2-7.el8_1.x86_64	İncele
62	Red Hat	AppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.aarch64	İncele
63	Red Hat	AppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.ppc64le	İncele
64	Red Hat	AppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.s390x	İncele
65	Red Hat	AppStream-8.1.0.Z.EUS:grafana-loki-0:6.2.2-7.el8_1.x86_64	İncele
66	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.aarch64	İncele
67	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.ppc64le	İncele
68	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.s390x	İncele
69	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mssql-0:6.2.2-7.el8_1.x86_64	İncele
70	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.aarch64	İncele
71	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.ppc64le	İncele
72	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.s390x	İncele
73	Red Hat	AppStream-8.1.0.Z.EUS:grafana-mysql-0:6.2.2-7.el8_1.x86_64	İncele
74	Red Hat	AppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.aarch64	İncele
75	Red Hat	AppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.ppc64le	İncele
76	Red Hat	AppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.s390x	İncele
77	Red Hat	AppStream-8.1.0.Z.EUS:grafana-opentsdb-0:6.2.2-7.el8_1.x86_64	İncele
78	Red Hat	AppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.aarch64	İncele
79	Red Hat	AppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.ppc64le	İncele
80	Red Hat	AppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.s390x	İncele
81	Red Hat	AppStream-8.1.0.Z.EUS:grafana-postgres-0:6.2.2-7.el8_1.x86_64	İncele
82	Red Hat	AppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.aarch64	İncele
83	Red Hat	AppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.ppc64le	İncele
84	Red Hat	AppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.s390x	İncele
85	Red Hat	AppStream-8.1.0.Z.EUS:grafana-prometheus-0:6.2.2-7.el8_1.x86_64	İncele
86	Red Hat	AppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.aarch64	İncele
87	Red Hat	AppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.ppc64le	İncele
88	Red Hat	AppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.s390x	İncele
89	Red Hat	AppStream-8.1.0.Z.EUS:grafana-stackdriver-0:6.2.2-7.el8_1.x86_64	İncele
90	Red Hat	AppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.aarch64	İncele
91	Red Hat	AppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.ppc64le	İncele
92	Red Hat	AppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.s390x	İncele
93	Red Hat	AppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.src	İncele
94	Red Hat	AppStream-8.2.0.Z.EUS:grafana-0:6.3.6-3.el8_2.x86_64	İncele
95	Red Hat	AppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.aarch64	İncele
96	Red Hat	AppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.ppc64le	İncele
97	Red Hat	AppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.s390x	İncele
98	Red Hat	AppStream-8.2.0.Z.EUS:grafana-azure-monitor-0:6.3.6-3.el8_2.x86_64	İncele
99	Red Hat	AppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.aarch64	İncele
100	Red Hat	AppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.ppc64le	İncele
101	Red Hat	AppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.s390x	İncele
102	Red Hat	AppStream-8.2.0.Z.EUS:grafana-cloudwatch-0:6.3.6-3.el8_2.x86_64	İncele
103	Red Hat	AppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.aarch64	İncele
104	Red Hat	AppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.ppc64le	İncele
105	Red Hat	AppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.s390x	İncele
106	Red Hat	AppStream-8.2.0.Z.EUS:grafana-debuginfo-0:6.3.6-3.el8_2.x86_64	İncele
107	Red Hat	AppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.aarch64	İncele
108	Red Hat	AppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.ppc64le	İncele
109	Red Hat	AppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.s390x	İncele
110	Red Hat	AppStream-8.2.0.Z.EUS:grafana-elasticsearch-0:6.3.6-3.el8_2.x86_64	İncele
111	Red Hat	AppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.aarch64	İncele
112	Red Hat	AppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.ppc64le	İncele
113	Red Hat	AppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.s390x	İncele
114	Red Hat	AppStream-8.2.0.Z.EUS:grafana-graphite-0:6.3.6-3.el8_2.x86_64	İncele
115	Red Hat	AppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.aarch64	İncele
116	Red Hat	AppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.ppc64le	İncele
117	Red Hat	AppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.s390x	İncele
118	Red Hat	AppStream-8.2.0.Z.EUS:grafana-influxdb-0:6.3.6-3.el8_2.x86_64	İncele
119	Red Hat	AppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.aarch64	İncele
120	Red Hat	AppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.ppc64le	İncele
121	Red Hat	AppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.s390x	İncele
122	Red Hat	AppStream-8.2.0.Z.EUS:grafana-loki-0:6.3.6-3.el8_2.x86_64	İncele
123	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.aarch64	İncele
124	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.ppc64le	İncele
125	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.s390x	İncele
126	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mssql-0:6.3.6-3.el8_2.x86_64	İncele
127	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.aarch64	İncele
128	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.ppc64le	İncele
129	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.s390x	İncele
130	Red Hat	AppStream-8.2.0.Z.EUS:grafana-mysql-0:6.3.6-3.el8_2.x86_64	İncele
131	Red Hat	AppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.aarch64	İncele
132	Red Hat	AppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.ppc64le	İncele
133	Red Hat	AppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.s390x	İncele
134	Red Hat	AppStream-8.2.0.Z.EUS:grafana-opentsdb-0:6.3.6-3.el8_2.x86_64	İncele
135	Red Hat	AppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.aarch64	İncele
136	Red Hat	AppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.ppc64le	İncele
137	Red Hat	AppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.s390x	İncele
138	Red Hat	AppStream-8.2.0.Z.EUS:grafana-postgres-0:6.3.6-3.el8_2.x86_64	İncele
139	Red Hat	AppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.aarch64	İncele
140	Red Hat	AppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.ppc64le	İncele
141	Red Hat	AppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.s390x	İncele
142	Red Hat	AppStream-8.2.0.Z.EUS:grafana-prometheus-0:6.3.6-3.el8_2.x86_64	İncele
143	Red Hat	AppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.aarch64	İncele
144	Red Hat	AppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.ppc64le	İncele
145	Red Hat	AppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.s390x	İncele
146	Red Hat	AppStream-8.2.0.Z.EUS:grafana-stackdriver-0:6.3.6-3.el8_2.x86_64	İncele
147	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.aarch64	İncele
148	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.ppc64le	İncele
149	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.s390x	İncele
150	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.src	İncele
151	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-0:7.3.6-3.el8_4.x86_64	İncele
152	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.aarch64	İncele
153	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.ppc64le	İncele
154	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.s390x	İncele
155	Red Hat	AppStream-8.4.0.Z.MAIN.EUS:grafana-debuginfo-0:7.3.6-3.el8_4.x86_64	İncele
156	Grafana Labs	Grafana	İncele

Total Affected Vendor: 2|Products: 156

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

Sonuçlar doğrudan Red Hat CSAF VEX ürün durumundan gelir; tahmin değildir.

Red Hat ürünü / sürüm dalı

Etkileniyor

Red Hat bu ürün sürümünü etkilenen olarak işaretliyor.

Red Hat düzeltmeleri

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCORE	VERSION	SEVERITY	VECTOR	SOURCE
7.3	cvss_v3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L	Red Hat

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Kısmi yama

18 düzeltme kanıtı bulundu; en az 14 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

redhat

Kaynağı aç

redhat

For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for moderate instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.html

Kaynağı aç

redhat

For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.html

Kaynağı aç

redhat

For OpenShift Container Platform 4.7 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.7/release_notes/ocp-4-7-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.7/updating/updating-cluster-cli.html

Kaynağı aç

redhat

For OpenShift Container Platform 4.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.8/release_notes/ocp-4-8-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.8/updating/updating-cluster-cli.html

Kaynağı aç

redhat

For OpenShift Container Platform 4.9 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.9/release_notes/ocp-4-9-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.9/updating/updating-cluster-cli.html

Kaynağı aç

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç

redhat

For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

Kaynağı aç

redhat

Out of support scope

redhat

Will not fix

redhat

Affected

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.

İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.

Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.

Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

CVE-2021-39226 için veritabanında 1 public PoC/exploit kaynağı bulunuyor. Doğrudan kaynak bağlantıları için Public Exploits sekmesini açın.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-39226 is associated with the following CWEs:

CWE-639: Common Weakness Enumeration Entry CWE-639

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-39226 weaknesses.

CAPEC-66: SQL Injection CAPEC-126: Path Traversal CAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden

YetkiGerekmiyor

KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

Canonical URLvendor-advisory RHBZ#2011063vendor-advisory https://www.cve.org/CVERecord?id=CVE-2021-39226vendor-advisory https://nvd.nist.gov/vuln/detail/CVE-2021-39226vendor-advisory https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9vendor-advisory https://grafana.com/blog/2021/10/05/grafana-7.5.11-and-8.1.6-released-with-critical-security-fix/vendor-advisory https://www.cisa.gov/known-exploited-vulnerabilities-catalogvendor-advisory For OpenShift Container Platform 3.11 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/3.11/release_notes/ocp_3_11_release_notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/3.11/upgrading/index.htmlpatch For OpenShift Container Platform 4.10 see the following documentation, which will be updated shortly for this release, for moderate instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.10/release_notes/ocp-4-10-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.10/updating/updating-cluster-cli.htmlpatch For OpenShift Container Platform 4.6 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this asynchronous errata update: https://docs.openshift.com/container-platform/4.6/release_notes/ocp-4-6-release-notes.html Details on how to access this content are available at https://docs.openshift.com/container-platform/4.6/updating/updating-cluster-cli.htmlpatch

CVSS Vektör Radar Grafiği

7.3 / 10

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Attack VectorNetwork (Ağ)

Attack ComplexityLow (Düşük)

Privileges RequiredNone (Gerekmiyor)

User InteractionNone (Gerekmiyor)

Confidentiality (Gizlilik)Low (Düşük)

Integrity (Bütünlük)None (Yok)

Availability (Erişilebilirlik)Low (Düşük)

Kısmi yama

18 düzeltme kanıtı bulundu; en az 14 ürün veya sürüm hâlâ etkileniyor ya da inceleniyor.

Üreticiyi takip et

Red Hat

Grafana Labs

Zafiyet Türü (CWE & CAPEC)

CWE-639

İlgili Benzer Açıklar

9.8

CVE-2024-23897 Aktif sömürülüyorjenkins: Arbitrary file read vulnerability through the CLI can lead to RCE

ÜreticiRed Hat Ürünred_hat_openshift_container_platform_3.11:jenkins+9 etkilenen

Kısmi yama Public Exploits:10EPSS %1002 yıl önce

9.8

CVE-2022-22963 Aktif sömürülüyorspring-cloud-function: Remote code execution by malicious Spring Expression

ÜreticiRed Hat Ürün8Base-Openshift-Serverless-1.21:openshift-serverless-1/client-kn-rhel8@sha256:2199a60cb46225b1551c0882fa0694fa846df5d6e3246f7cfbf6ddf5b55f6b5f_ppc64le+9 etkilenen

Yama doğrulandı Public Exploits:11EPSS %1004 yıl önce

9.8

CVE-2023-46604 Aktif sömürülüyoractivemq-openwire: OpenWire Module: Unbounded deserialization causes ActiveMQ to be vulnerable to a remote code execution (RCE) attack

ÜreticiRed Hat Ürünred_hat_jboss_fuse_service_works_6:activemq-openwire+8 etkilenen

Kısmi yama Public Exploits:9EPSS %1003 yıl önce

9.8

CVE-2020-16846 Aktif sömürülüyorsalt: sending crafted web requests to the Salt API, with the SSH client enabled, can result in shell injection

ÜreticiRed Hat Ürünred_hat_ceph_storage_2:salt+3 etkilenen

Yama yok (üretici) Public Exploits:2EPSS %1006 yıl önce

9.8

CVE-2012-0507 Aktif sömürülüyorVulnerability in N/a

Üreticin/a Ürünn/a+24 etkilenen

Kısmi yama Public Exploits:1EPSS %9814 yıl önce

9.6

CVE-2023-4863 Aktif sömürülüyorlibwebp: Heap buffer overflow in WebP Codec

ÜreticiRed Hat Ürünred_hat_enterprise_linux_6:firefox+24 etkilenen

Kısmi yama Public Exploits:8EPSS %1003 yıl önce

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar al Belgeler

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2021-39226"

grafana: Snapshot authentication bypass

Envanterimdeki Etkisi

Zafiyet Açıklaması

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Bu CVE benim Red Hat ürünümü etkiliyor mu?

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

Common Attack Pattern Enumeration and Classification (CAPEC)

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

Resmi Kaynaklar ve Danışma Bültenleri

CVSS Vektör Radar Grafiği

Vulnerability Scoring Details

Zafiyet Türü (CWE & CAPEC)

İlgili Benzer Açıklar

Bu açığı API ile alın

DayBreach

Sözlük & Referans

Dizinler & Akışlar

RSS & Entegrasyon