CyberRota Analysis
AI-GeneratedSelf-managed Grafana instances with Auth Proxy authentication and identity caching enabled are vulnerable due to a flaw in how cache keys are generated, allowing distinct user identities to collide. This can enable an authenticated user to impersonate a higher-privileged user, potentially gaining administrative access through authentication bypass. Organizations using Grafana in this configuration should prioritize remediation to mitigate the risk of unauthorized access.
Original NVD Description
Only self-managed Grafana instances with Auth Proxy authentication and identity caching enabled (sync_ttl greater than zero) are affected. The Auth Proxy cache key concatenated the username and forwarded identity attributes without a delimiter, so distinct identities could collide on one key. An authenticated user who shapes their own attributes to collide with a higher-privileged user's, while that user's cache entry is live, is authenticated as that user, up to Administrator (authentication bypass by spoofing).
Related CVEs
Other vulnerabilities affecting the same vendor(s)