Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

SUSE Manager Tools 15: 2021:2660-1 Important: Grafana DoS

suse
Calendar Grey August 12, 2021
Dist Suse Esm H88
A critical enhancement related to security for Grafana that tackles 5 vulnerabilities is now released for SUSE Manager Tools.
An update that fixes 5 vulnerabilities is now available

Summary

This update for grafana fixes the following issues: - CVE-2021-27358: unauthenticated remote attackers to trigger a Denial of Service via a remote API call (bsc#1183803) - Update to version 7.5.7: * Updated relref to "Configuring exemplars" section (#34240) (#34243) * Added exemplar topic (#34147) (#34226) * Quota: Do not count folders towards dashboard quota (#32519) (#34025) * Instructions to separate emails with semicolons (#32499) (#34138) * Docs: Remove documentation of v8 generic OAuth feature (#34018) * Annotations: Prevent orphaned annotation tags cleanup when no annotations were cleaned (#33957) (#33975) * [GH-33898] Add missing --no-cache to Dockerfile. (#33906) (#33935) * ReleaseNotes: Updated changelog and release notes for 7.5.6 (#33932) (#33936) * Stop hoisting @icons/material (#33922)

Topics%20covered

Topics Covered

security advisory remote attack important Denial of Service Grafana SUSE Manager Tools API exploit

References

#1183803 #1183809 #1183811 #1183813 #1184371

Cross- CVE-2021-27358 CVE-2021-27962 CVE-2021-28146

CVE-2021-28147 CVE-2021-28148

CVSS scores:

CVE-2021-27358 (NVD) : 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2021-27358 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CVE-2021-27962 (NVD) : 7.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CVE-2021-27962 (SUSE): 6.8 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

CVE-2021-28148 (SUSE): 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected Products:

SUSE Manager Tools 15

https://www.suse.com/security/cve/CVE-2021-27358.html

https://www.suse.com/security/cve/CVE-2021-27962.html

https://www.suse.com/security/cve/CVE-2021-28146.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2021:2660-1
Rating: important

Topics%20covered

Topics Covered

security advisory remote attack important Denial of Service Grafana SUSE Manager Tools API exploit

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here