Test ID:	1.3.6.1.4.1.25623.1.0.146863
Category:	Web application abuses
Title:	Grafana 2.0.1 < 7.5.11, 8.x < 8.1.6 Snapshot Authentication Bypass Vulnerability (GHSA-69j6-29vr-p3j9)
Summary:	Grafana is prone to an authentication bypass vulnerability in; the snapshot functionality.
Description:	Summary: Grafana is prone to an authentication bypass vulnerability in the snapshot functionality. Vulnerability Insight: Unauthenticated and authenticated users are able to view the snapshot with the lowest database key by accessing the literal paths: /dashboard/snapshot/:key, or /api/snapshots/:key If the snapshot 'public_mode' configuration setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey Regardless of the snapshot 'public_mode' setting, authenticated users are able to delete the snapshot with the lowest database key by accessing the literal paths: /api/snapshots/:key, or /api/snapshots-delete/:deleteKey The combination of deletion and viewing enables a complete walk through all snapshot data while resulting in complete snapshot data loss. Affected Software/OS: Grafana version 2.0.1 through 7.5.10 and 8.x through 8.1.5. Solution: Update to version 7.5.11, 8.1.6 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2021-39226 https://github.com/grafana/grafana/security/advisories/GHSA-69j6-29vr-p3j9 https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/DCKBFUSY6V4VU5AQUYWKISREZX5NLQJT/ https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E6ANHRDBXQT6TURLP2THM26ZPDINFBEG/ https://github.com/grafana/grafana/commit/2d456a6375855364d098ede379438bf7f0667269 https://grafana.com/docs/grafana/latest/release-notes/release-notes-7-5-11/ https://grafana.com/docs/grafana/latest/release-notes/release-notes-8-1-6/ http://www.openwall.com/lists/oss-security/2021/10/05/4
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.