The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2023_4030 advisory.

    * grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by a vulnerability as referenced in the grafana-9.2.10-4.el9 build changelog.

  - account takeover possible when using Azure AD OAuth (CVE-2023-3128)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is     not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure     AD OAuth is configured with a multi-tenant app. (CVE-2023-3128)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6972 advisory.

    - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work
    - resolve CVE-2023-3128 grafana: account takeover possible when using Azure AD OAuth
    - resolve CVE-2022-39229 grafana: using email as a username can block other users from signing in
    - resolve CVE-2022-27664 golang: net/http: handle server errors after sending GOAWAY
    - resolve CVE-2022-41715 golang: regexp/syntax: limit memory used by parsing regexps
    - resolve CVE-2022-2880 golang: net/http/httputil: ReverseProxy should not forward unparseable query     parameters
    - resolve CVE-2022-1962 golang: go/parser: stack exhaustion in all Parse* functions
    - resolve CVE-2022-1705 golang: net/http: improper sanitization of Transfer-Encoding header
    - resolve CVE-2022-32148 golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not     working
    - resolve CVE-2022-30631 golang: compress/gzip: stack exhaustion in Reader.Read
    - resolve CVE-2022-30630 golang: io/fs: stack exhaustion in Glob
    - resolve CVE-2022-30632 golang: path/filepath: stack exhaustion in Glob
    - resolve CVE-2022-30635 golang: encoding/gob: stack exhaustion in Decoder.Decode
    - resolve CVE-2022-28131 golang: encoding/xml: stack exhaustion in Decoder.Skip
    - resolve CVE-2022-30633 golang: encoding/xml: stack exhaustion in Unmarshal
    - resolve CVE-2022-31107 grafana: OAuth account takeover
    - resolve CVE-2022-21673 grafana: Forward OAuth Identity Token can allow users to access some data sources
    - resolve CVE-2022-21702 grafana: XSS vulnerability in data source handling
    - resolve CVE-2022-21703 grafana: CSRF vulnerability can lead to privilege escalation
    - resolve CVE-2022-21713 grafana: IDOR vulnerability can lead to information disclosure
    - resolve CVE-2021-23648 sanitize-url: XSS
    - resolve CVE-2022-21698 prometheus/client_golang: Denial of service using InstrumentHandlerCounter
    - resolve CVE-2021-44716 golang: net/http: limit growth of header canonicalization cache
    - resolve CVE-2021-43813 grafana: directory traversal vulnerability for *.md files
    - resolve CVE-2021-39226
    - rebuild to resolve CVE-2021-34558
    - apply patch for CVE-2020-13430 also to sources, not only to compiled webpack
    - security fix for CVE-2020-13430
    - security fix for CVE-2020-13379
    - change permissions of /var/lib/grafana to 750 (CVE-2020-12458)
    - change permissions of /var/lib/grafana/grafana.db to 640 and       user/group grafana:grafana (CVE-2020-12458)
    - change permissions of grafana.ini and ldap.toml to 640 (CVE-2020-12459)
    - include fix for CVE-2019-15043

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2023-6225:07 advisory.

    grafana: account takeover possible when using Azure AD OAuth (CVE-2023-3128)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2023:0286 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

      CVE-2023-3128:
      Grafana is validating Azure AD accounts based on the email claim.
      On Azure AD, the profile email field is not unique and can be easily modified.
      This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-     tenant app.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3925 advisory.

    Red Hat Ceph Storage is a scalable, open, software-defined storage platform that combines the most stable     version of the Ceph storage system with a Ceph management platform, deployment utilities, and support     services.

    These new packages include numerous enhancements, bug fixes, and known issues. Space precludes documenting     all of these changes in this advisory. Users are directed to the Red Hat Ceph Storage Release Notes for     information on the most significant of these changes:

    https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/7.1/html/release_notes/index

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has a package installed that is affected by a vulnerability as referenced in the ALSA-2023:4030 advisory.

  - Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is     not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure     AD OAuth is configured with a multi-tenant app. (CVE-2023-3128)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2023:4030 advisory.

  - Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is     not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure     AD OAuth is configured with a multi-tenant app. (CVE-2023-3128)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-4030 advisory.

    [9.0.9-3]
    - resolve CVE-2023-3128 grafana: Remove Email Lookup from oauth integrations       (rhbz#2213701 rhbz#2213626)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
356939	Rocky Linux 9 [CIQ] Security Update: grafana / grafana-debuginfo / grafana-debugsource (crlsa-2023_4030)	Nessus	Rocky Linux Local Security Checks	2026/10/1	2026/10/1	critical
191351	CentOS 9 : grafana-9.2.10-4.el9	Nessus	CentOS Local Security Checks	2024/2/29	2024/4/26	critical
260988	Linux Distros Unpatched Vulnerability : CVE-2023-3128	Nessus	Misc.	2025/9/3	2026/8/4	critical
186091	Oracle Linux 8 : grafana (ELSA-2023-6972)	Nessus	Oracle Linux Local Security Checks	2023/11/21	2025/9/9	critical
293589	MiracleLinux 9 : grafana-9.0.9-3.el9 (AXSA:2023-6225:07)	Nessus	Miracle Linux Local Security Checks	2026/1/20	2026/1/20	critical
239562	TencentOS Server 3: grafana (TSSA-2023:0286)	Nessus	Tencent Local Security Checks	2025/6/16	2025/11/20	critical
200554	RHEL 8 / 9 : Red Hat Ceph Storage 7.1 (RHSA-2024:3925)	Nessus	Red Hat Local Security Checks	2024/6/14	2024/11/7	critical
178194	AlmaLinux 9 : grafana (ALSA-2023:4030)	Nessus	Alma Linux Local Security Checks	2023/7/12	2023/11/2	critical
178491	Rocky Linux 9 : grafana (RLSA-2023:4030)	Nessus	Rocky Linux Local Security Checks	2023/7/19	2023/11/2	critical
178577	Oracle Linux 9 : grafana (ELSA-2023-4030)	Nessus	Oracle Linux Local Security Checks	2023/7/20	2025/9/9	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical