CVE-2022-46156
3 advisories.
Go/github.com/grafana/synthetic-monitoring-agent/cmd/synthetic-monitoring-agent CVE-2022-46156: high 7.2
Default installation of `synthetic-monitoring-agent` exposes sensitive information
Action: Upgrade github.com/grafana/synthetic-monitoring-agent/cmd/synthetic-monitoring-agent to 0.12.0 or later.
go get github.com/grafana/synthetic-monitoring-agent/cmd/synthetic-monitoring-agent@v0.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.0 | - |
Fixed versions
| 0.12.0 |
Sources
- osv: GHSA-9j4f-f249-q5w8
- https://github.com/grafana/synthetic-monitoring-agent/security/advisories/GHSA-9j4f-f249-q5w8
- https://nvd.nist.gov/vuln/detail/CVE-2022-46156
- https://github.com/grafana/synthetic-monitoring-agent/pull/373
- https://github.com/grafana/synthetic-monitoring-agent/pull/374
- https://github.com/grafana/synthetic-monitoring-agent/pull/375
- https://github.com/grafana/synthetic-monitoring-agent/commit/d8dc7f9c1c641881cbcf0a09e178b90ebf0f0228
- https://github.com/grafana/synthetic-monitoring-agent
- https://github.com/grafana/synthetic-monitoring-agent/releases/tag/v0.12.0
- https://pkg.go.dev/vuln/GO-2022-1132
CVE-2022-46156 · published · modified · JSON
Go/github.com/grafana/synthetic-monitoring-agent CVE-2022-46156: high 7.2
Default installation of `synthetic-monitoring-agent` exposes sensitive information
Action: Upgrade github.com/grafana/synthetic-monitoring-agent to 0.12.0 or later.
go get github.com/grafana/synthetic-monitoring-agent@v0.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.0 | - |
Fixed versions
| 0.12.0 |
Sources
- osv: GHSA-9j4f-f249-q5w8#Go/github.com/grafana/synthetic-monitoring-agent
- https://github.com/grafana/synthetic-monitoring-agent/security/advisories/GHSA-9j4f-f249-q5w8
- https://nvd.nist.gov/vuln/detail/CVE-2022-46156
- https://github.com/grafana/synthetic-monitoring-agent/pull/373
- https://github.com/grafana/synthetic-monitoring-agent/pull/374
- https://github.com/grafana/synthetic-monitoring-agent/pull/375
- https://github.com/grafana/synthetic-monitoring-agent/commit/d8dc7f9c1c641881cbcf0a09e178b90ebf0f0228
- https://github.com/grafana/synthetic-monitoring-agent
- https://github.com/grafana/synthetic-monitoring-agent/releases/tag/v0.12.0
- https://pkg.go.dev/vuln/GO-2022-1132
CVE-2022-46156 · published · modified · JSON
Go/github.com/grafana/synthetic-monitoring-agent CVE-2022-46156: unknown
Grafana's default installation of `synthetic-monitoring-agent` exposes sensitive information in github.com/grafana/synthetic-monitoring-agent
Action: Upgrade github.com/grafana/synthetic-monitoring-agent to 0.12.0 or later.
go get github.com/grafana/synthetic-monitoring-agent@v0.12.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.12.0 | - |
Fixed versions
| 0.12.0 |
Sources
- osv: GO-2022-1132
- https://github.com/grafana/synthetic-monitoring-agent/security/advisories/GHSA-9j4f-f249-q5w8
- https://nvd.nist.gov/vuln/detail/CVE-2022-46156
- https://github.com/grafana/synthetic-monitoring-agent/commit/d8dc7f9c1c641881cbcf0a09e178b90ebf0f0228
- https://github.com/grafana/synthetic-monitoring-agent/pull/373
- https://github.com/grafana/synthetic-monitoring-agent/pull/374
- https://github.com/grafana/synthetic-monitoring-agent/pull/375
- https://github.com/grafana/synthetic-monitoring-agent/releases/tag/v0.12.0
CVE-2022-46156 · published · modified · JSON