Home > Vulnerability Database > CVE-2024-9476

Mend.io Vulnerability Database

CVE-2024-9476

Good to know:

Date: November 13, 2024

A privilege escalation vulnerability was discovered in self-managed Grafana OSS v11.2 and Grafana Enterprise v11.2 during routine internal testing. The vulnerability allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.

Language: Go

Severity Score

0.0

Related Resources (4)

Url: https://grafana.com/security/security-advisories/cve-2024-9476/

Url: https://nvd.nist.gov/vuln/detail/CVE-2024-9476

Url: https://grafana.com/blog/2024/11/12/grafana-security-release-medium-severity-security-fix-for-cve-2024-9476/

Url: https://www.mend.io/vulnerability-database/CVE-2024-9476

Weakness Type (CWE)

Improper Privilege Management

CWE-269

Incorrect Privilege Assignment

CWE-266

Top Fix

Upgrade Version

Upgrade to version github.com/grafana/grafana-v11.3.0+security-01

Learn More

CVSS v3.1

Base Score:	0.0
Attack Vector (AV):	LOCAL
Attack Complexity (AC):	LOW
Privileges Required (PR):	HIGH
User Interaction (UI):	REQUIRED
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	NONE