PT-2023-3111 · Grafana+3 · Grafana+3

Sebob · Published 2023-04-19 · Updated 2024-06-15 · CVE-2023-2183

Positive Technologies (AI Summary)

CVSS v3.1

4.1

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Grafana versions prior to 9.5.3 Grafana versions prior to 9.4.12 Grafana versions prior to 9.3.15 Grafana versions prior to 9.2.19 Grafana versions prior to 8.5.26

Description Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available from the user panel UI for users having the Viewer role. However, it is still possible for a user with the Viewer role to send a test alert using the API as the API does not check access to this function. This might enable malicious users to abuse the functionality by sending multiple alert messages to e-mail and Slack, spamming users, preparing Phishing attacks, or blocking SMTP servers.

The API endpoint /api/alertmanager/grafana/config/api/v1/receivers/test can be exploited by users with the Viewer role, allowing them to send test alerts. The receivers and alert variables are used in this process. Malicious users can send specially crafted alert messages, potentially leading to phishing attacks or SMTP server blockage.

Recommendations For versions prior to 9.5.3, upgrade to version 9.5.3 to receive a fix. For versions prior to 9.4.12, upgrade to version 9.4.12 to receive a fix. For versions prior to 9.3.15, upgrade to version 9.3.15 to receive a fix. For versions prior to 9.2.19, upgrade to version 9.2.19 to receive a fix. For versions prior to 8.5.26, upgrade to version 8.5.26 to receive a fix. As a temporary workaround, consider restricting access to the /api/alertmanager/grafana/config/api/v1/receivers/test API endpoint for users with the Viewer role. Additionally, limit the ability to send multiple e-mails to the same e-mail address per unit of time in the SMTP server configuration settings.

Exploit

Fix

Improper Access Control

Missing Authorization

Weakness Enumeration

CWE-284

CWE-862

Related Identifiers

ALT-PU-2023-4133

ALT-PU-2023-4148

ALT-PU-2023-4346

ALT-PU-2023-4567

BDU:2023-03205

BIT-GRAFANA-2023-2183

CVE-2023-2183

ECHO-6AF8-EA5D-883D

GHSA-CVM3-PP2J-CHR3

GHSA-WM7R-3QXJ-5XGQ

OPENSUSE-SU-2023_2917-1

OPENSUSE-SU-2023_3136-1

OPENSUSE-SU-2024:13027-1

RHSA-2023:7740

SUSE-SU-2023:2915-1

SUSE-SU-2023:2916-1

SUSE-SU-2023:2917-1

SUSE-SU-2023:3136-1

SUSE-SU-2024:0191-1

SUSE-SU-2024:0196-1

Affected Products

Alt Linux

Grafana

Red Os

Suse

References · 170

• 🔥 https://github.com/grafana/bugbounty/security/advisories/GHSA-cvm3-pp2j-chr3 · Exploit
• https://osv.dev/vulnerability/BIT-grafana-2023-2183 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2916-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-2183 · Vendor Advisory
• https://grafana.com/security/security-advisories/cve-2023-2183 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-03205 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0196-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13027-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wm7r-3qxj-5xgq · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0191-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:2917-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-2183 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-2183 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cvm3-pp2j-chr3 · Vendor Advisory