CVE-2022-39328 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2022-39328 Interim 1 1 2022-11-10T00:43:02Z current 2022-11-10T00:43:02Z 2022-11-10T00:43:02Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2022-39328 Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patched in 9.2.4. There are no known workarounds. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://www.suse.com/support/security/rating/ SUSE Security Ratings HPE Helion OpenStack 8 SUSE Enterprise Storage 6 SUSE Manager Client Tools Beta for SLE 12 SUSE Manager Client Tools Beta for SLE 15 SUSE Manager Client Tools for SLE 12 SUSE Manager Client Tools for SLE 15 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 grafana grafana as a component of HPE Helion OpenStack 8 grafana as a component of SUSE Enterprise Storage 6 grafana as a component of SUSE Manager Client Tools Beta for SLE 12 grafana as a component of SUSE Manager Client Tools Beta for SLE 15 grafana as a component of SUSE Manager Client Tools for SLE 12 grafana as a component of SUSE Manager Client Tools for SLE 15 grafana as a component of SUSE OpenStack Cloud 8 grafana as a component of SUSE OpenStack Cloud 9 grafana as a component of SUSE OpenStack Cloud Crowbar 8 grafana as a component of SUSE OpenStack Cloud Crowbar 9 Grafana is an open-source platform for monitoring and observability. Versions starting with 9.2.0 and less than 9.2.4 contain a race condition in the authentication middlewares logic which may allow an unauthenticated user to query an administration endpoint under heavy load. This issue is patched in 9.2.4. There are no known workarounds. CVE-2022-39328 HPE Helion OpenStack 8:grafana SUSE Enterprise Storage 6:grafana SUSE Manager Client Tools Beta for SLE 12:grafana SUSE Manager Client Tools Beta for SLE 15:grafana SUSE Manager Client Tools for SLE 12:grafana SUSE Manager Client Tools for SLE 15:grafana SUSE OpenStack Cloud 8:grafana SUSE OpenStack Cloud 9:grafana SUSE OpenStack Cloud Crowbar 8:grafana SUSE OpenStack Cloud Crowbar 9:grafana critical 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H