CVE catalog

CVE-2022-31123

UBUNTU-CVE-2022-31123

Severity: Medium · CVSS 6.1CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L
Published: Oct 13, 2022, 10:15:00 PM UTC
Updated: Feb 4, 2026, 3:48:17 AM UTC
Source: [NVD] · [CVE record]
EPSS: 0.27% · Oct 25, 2026

This update for grafana fixes the following issues: - Version update from 8.5.13 to 8.5.15 (jsc#PED-2617): * CVE-2022-39306: Security fix for privilege escalation (bsc#1205225) * CVE-2022-39307: Omit error from http response when user does not exists (bsc#1205227) * CVE-2022-39201: Do not forward login cookie in outgoing requests (bsc#1204303) * CVE-2022-31130: Make proxy endpoints not leak sensitive HTTP headers (bsc#1204305) * CVE-2022-31123: Fix plugin signature bypass (bsc#1204302) * CVE-2022-39229: Fix blocking other users from signing in (bsc#1204304)

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Suse	grafana	linux enterprise module for package hub 15 sp4	`8.5.15-150200.3.32.1`	fixed
Opensuse	grafana	leap 15.4	`8.5.15-150200.3.32.1`	fixed
Suse	grafana	manager client tools 12	`8.5.15-1.39.1`	fixed
Suse	kiwi-desc-saltboot	manager client tools 12	`0.1.1673279145.e7616bd-1.32.1`	fixed
Suse	mgr-osad	manager client tools 12	`4.3.7-1.42.1`	fixed
Suse	mgr-push	manager client tools 12	`4.3.5-1.24.1`	fixed
Suse	rhnlib	manager client tools 12	`4.3.5-21.46.1`	fixed
Suse	spacecmd	manager client tools 12	`4.3.18-38.115.1`	fixed
Suse	spacewalk-client-tools	manager client tools 12	`4.3.14-52.83.1`	fixed
Suse	uyuni-common-libs	manager client tools 12	`4.3.7-1.30.1`	fixed
Suse	dracut-saltboot	manager client tools 15	`0.1.1673279145.e7616bd-150000.1.44.1`	fixed
Suse	grafana	manager client tools 15	`8.5.15-150000.1.39.1`	fixed
Suse	mgr-osad	manager client tools 15	`4.3.7-150000.1.42.1`	fixed
Suse	mgr-push	manager client tools 15	`4.3.5-150000.1.24.2`	fixed
Suse	rhnlib	manager client tools 15	`4.3.5-150000.3.40.1`	fixed
Suse	spacecmd	manager client tools 15	`4.3.18-150000.3.92.1`	fixed
Suse	spacewalk-client-tools	manager client tools 15	`4.3.14-150000.3.74.1`	fixed
Suse	uyuni-common-libs	manager client tools 15	`4.3.7-150000.1.30.1`	fixed
Suse	dracut-saltboot	manager client tools for sle micro 5	`0.1.1673279145.e7616bd-150000.1.44.1`	fixed
Opensuse	dracut-saltboot	leap 15.4	`0.1.1673279145.e7616bd-150000.1.44.1`	fixed
Opensuse	spacecmd	leap 15.4	`4.3.18-150000.3.92.1`	fixed
Opensuse	grafana	tumbleweed	`8.5.14-1.1`	fixed
Ubuntu	grafana	16.04	`2.6.0+dfsg-1`	vulnerable

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Suse	grafana	rpm	linux enterprise module for package hub 15 sp4	`8.5.15-150200.3.32.1`	Not reported	SUSE-SU-2023:0362-1	Not reported
Opensuse	grafana	rpm	leap 15.4	`8.5.15-150200.3.32.1`	Not reported	SUSE-SU-2023:0362-1	Not reported
Suse	grafana	rpm	manager client tools 12	`8.5.15-1.39.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	kiwi-desc-saltboot	rpm	manager client tools 12	`0.1.1673279145.e7616bd-1.32.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	mgr-osad	rpm	manager client tools 12	`4.3.7-1.42.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	mgr-push	rpm	manager client tools 12	`4.3.5-1.24.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	rhnlib	rpm	manager client tools 12	`4.3.5-21.46.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	spacecmd	rpm	manager client tools 12	`4.3.18-38.115.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	spacewalk-client-tools	rpm	manager client tools 12	`4.3.14-52.83.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	uyuni-common-libs	rpm	manager client tools 12	`4.3.7-1.30.1`	Not reported	SUSE-SU-2023:0352-1	Not reported
Suse	dracut-saltboot	rpm	manager client tools 15	`0.1.1673279145.e7616bd-150000.1.44.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	grafana	rpm	manager client tools 15	`8.5.15-150000.1.39.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	mgr-osad	rpm	manager client tools 15	`4.3.7-150000.1.42.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	mgr-push	rpm	manager client tools 15	`4.3.5-150000.1.24.2`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	rhnlib	rpm	manager client tools 15	`4.3.5-150000.3.40.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	spacecmd	rpm	manager client tools 15	`4.3.18-150000.3.92.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	spacewalk-client-tools	rpm	manager client tools 15	`4.3.14-150000.3.74.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	uyuni-common-libs	rpm	manager client tools 15	`4.3.7-150000.1.30.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Suse	dracut-saltboot	rpm	manager client tools for sle micro 5	`0.1.1673279145.e7616bd-150000.1.44.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Opensuse	dracut-saltboot	rpm	leap 15.4	`0.1.1673279145.e7616bd-150000.1.44.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Opensuse	spacecmd	rpm	leap 15.4	`4.3.18-150000.3.92.1`	Not reported	SUSE-SU-2023:0353-1	Not reported
Opensuse	grafana	rpm	tumbleweed	`8.5.14-1.1`	Not reported	OPENSUSE-SU-2024:12508-1	Not reported

OpenFactory catalog packages

[openSUSE Tumbleweed]

[grafana]Fixed
Source package: [grafana]
Details (1)
- 12.4.5-4.1 · x86_64 · tumbleweed
  Fixed · Fixed: 8.5.14-1.1
  pypi · grafana · opensuse · tumbleweed

Observed: Oct 23, 2026, 6:27:05 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]