CVE-2021-27962

Katalog CVE

CVSS 7.1 · High EPSS 2,1%

Kerentanan pada grafana. Skor CVSS 3.1 7.1 (High) menurut NVD.

Deskripsi (NVD)

Grafana Enterprise 7.2.x and 7.3.x before 7.3.10 and 7.4.x before 7.4.5 allows a dashboard editor to bypass a permission check concerning a data source they should not be able to access.

Rincian

Terbit di NVD

22 Maret 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N · uraikan di kalkulator

EPSS (30 hari)

2,1% peluang dieksploitasi; lebih tinggi dari 80,9% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://community.grafana.com advisory vendor
• https://community.grafana.com/t/grafana-enterprise-6-7-6-7-3-10-and-7-4-5-security-update/44724 release notes · advisory vendor
• https://community.grafana.com/t/release-notes-v6-7-x/27119 release notes · advisory vendor
• https://grafana.com/blog/2021/03/18/grafana-6.7.6-7.3.10-and-7.4.5-released-with-important-security-fixes-for-... release notes · advisory vendor
• https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-4-5/ release notes · advisory vendor
• http://www.openwall.com/lists/oss-security/2021/03/19/5 mailing list · advisory pihak ketiga