CVE-2024-9476: Privilege escalation vulnerability for Organizations in Grafana

Published Nov 13, 2024

Updated

A vulnerability in Grafana Labs Grafana OSS and Enterprise allows Privilege Escalation allows users to gain access to resources from other organizations within the same Grafana instance via the Grafana Cloud Migration Assistant.This vulnerability will only affect users who utilize the Organizations feature to isolate resources on their Grafana instance.

Affected Software

1 affected component

Grafana Labs Grafana OSS and Enterprise

Event History

Nov 13, 2024

CVE Published

via MITRE·04:30 PM

Data Sourced

via MITRE·04:30 PM

DescriptionWeakness

Data Sourced

via NVD·05:15 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2024-9476?

CVE-2024-9476 has been classified as a medium severity vulnerability.

How do I fix CVE-2024-9476?

To mitigate CVE-2024-9476, update your Grafana Labs Grafana OSS and Enterprise to the latest version that addresses this vulnerability.

Who is affected by CVE-2024-9476?

CVE-2024-9476 affects users of Grafana Labs Grafana OSS and Enterprise who utilize the Grafana Cloud Migration Assistant.

What type of vulnerability is CVE-2024-9476?

CVE-2024-9476 is a privilege escalation vulnerability that allows unauthorized access to resources from other organizations.

When was CVE-2024-9476 disclosed?

CVE-2024-9476 was disclosed in November 2024.