The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:7519 advisory.

  - Grafana is an open-source platform for monitoring and observability. Affected versions are subject to a     cross site request forgery vulnerability which allows attackers to elevate their privileges by mounting     cross-origin attacks against authenticated high-privilege Grafana users (for example, Editors or Admins).
    An attacker can exploit this vulnerability for privilege escalation by tricking an authenticated user into     inviting the attacker as a new user with high privileges. Users are advised to upgrade as soon as     possible. There are no known workarounds for this issue. (CVE-2022-21703)

  - The package @braintree/sanitize-url before 6.0.0 are vulnerable to Cross-site Scripting (XSS) due to     improper sanitization in sanitizeUrl function. (CVE-2021-23648)

  - Grafana is an open-source platform for monitoring and observability. In affected versions when a data     source has the Forward OAuth Identity feature enabled, sending a query to that datasource with an API     token (and no other user credentials) will forward the OAuth Identity of the most recently logged-in user.
    This can allow API token holders to retrieve data for which they may not have intended access. This attack     relies on the Grafana instance having data sources that support the Forward OAuth Identity feature, the     Grafana instance having a data source with the Forward OAuth Identity feature toggled on, the Grafana     instance having OAuth enabled, and the Grafana instance having usable API keys. This issue has been     patched in versions 7.5.13 and 8.3.4. (CVE-2022-21673)

  - Grafana is an open-source platform for monitoring and observability. In affected versions an attacker     could serve HTML content thru the Grafana datasource or plugin proxy and trick a user to visit this HTML     page using a specially crafted link and execute a Cross-site Scripting (XSS) attack. The attacker could     either compromise an existing datasource for a specific Grafana instance or either set up its own public     service and instruct anyone to set it up in their Grafana instance. To be impacted, all of the following     must be applicable. For the data source proxy: A Grafana HTTP-based datasource configured with Server as     Access Mode and a URL set, the attacker has to be in control of the HTTP server serving the URL of above     datasource, and a specially crafted link pointing at the attacker controlled data source must be clicked     on by an authenticated user. For the plugin proxy: A Grafana HTTP-based app plugin configured and enabled     with a URL set, the attacker has to be in control of the HTTP server serving the URL of above app, and a     specially crafted link pointing at the attacker controlled plugin must be clocked on by an authenticated     user. For the backend plugin resource: An attacker must be able to navigate an authenticated user to a     compromised plugin through a crafted link. Users are advised to update to a patched version. There are no     known workarounds for this vulnerability. (CVE-2022-21702)

  - Grafana is an open-source platform for monitoring and observability. Affected versions of Grafana expose     multiple API endpoints which do not properly handle user authorization. `/teams/:teamId` will allow an     authenticated attacker to view unintended data by querying for the specific team ID, `/teams/:search` will     allow an authenticated attacker to search for teams and see the total number of available teams, including     for those teams that the user does not have access to, and `/teams/:teamId/members` when editors_can_admin     flag is enabled, an authenticated attacker can see unintended data by querying for the specific team ID.
    Users are advised to upgrade as soon as possible. There are no known workarounds for this issue.
    (CVE-2022-21713)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:8057 advisory.

  - Acceptance of some invalid Transfer-Encoding headers in the HTTP/1 client in net/http before Go 1.17.12     and Go 1.18.4 allows HTTP request smuggling if combined with an intermediate server that also improperly     fails to reject the header as invalid. (CVE-2022-1705)

  - Uncontrolled recursion in the Parse functions in go/parser before Go 1.17.12 and Go 1.18.4 allow an     attacker to cause a panic due to stack exhaustion via deeply nested types or declarations. (CVE-2022-1962)

  - client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package     in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version     1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential     memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an     instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`;
    not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our     middleware; and not have any firewall/LB/proxy that filters away requests with unknown `method`.
    client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including     removing the `method` label name from counter/gauge used in the InstrumentHandler; turning off affected     promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method     given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow     a limited set of methods. (CVE-2022-21698)

  - Uncontrolled recursion in Decoder.Skip in encoding/xml before Go 1.17.12 and Go 1.18.4 allows an attacker     to cause a panic due to stack exhaustion via a deeply nested XML document. (CVE-2022-28131)

  - Uncontrolled recursion in Glob in io/fs before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a     panic due to stack exhaustion via a path which contains a large number of path separators.
    (CVE-2022-30630)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-1762 advisory.

    - switch to RHEL maintenance branch which fixes CVE-2022-27651
    - Fix CVE-2021-3592 CVE-2021-3593 CVE-2021-3594 CVE-2021-3595 out-of-bounds access
    - fix CVE-2022-21698

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21379-1 advisory.

    Changes in ctop embedded dependencies:

    - CVE-2022-21698: client_golang: Denial of service using InstrumentHandlerCounter (bsc#1248710)
    - CVE-2024-45310: runc: runc can be tricked into creating empty files (bsc#1257431)
    - CVE-2026-10722: ebpf: Crash when parsing malformed ELF/BTF input (bsc#1267805)
    - CVE-2026-33814: net: Infinite loop in HTTP/2 transport when given bad SETTINGS_MAX_FRAME_SIZE     (bsc#1265800)
    - CVE-2026-39821: net: Failure to reject ASCII-only Punycode-encoded labels (bsc#1266632)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the grafana-9.0.9-1.el9 build changelog.

  - XSS (CVE-2021-23648)

  - Grafana is an open source data visualization platform. In affected versions unauthenticated and     authenticated users are able to view the snapshot with the lowest database key by accessing the literal     paths: /dashboard/snapshot/:key, or /api/snapshots/:key. If the snapshot public_mode configuration     setting is set to true (vs default of false), unauthenticated users are able to delete the snapshot with     the lowest database key by accessing the literal path: /api/snapshots-delete/:deleteKey. Regardless of the     snapshot public_mode setting, authenticated users are able to delete the snapshot with the lowest     database key by accessing the literal paths: /api/snapshots/:key, or /api/snapshots-delete/:deleteKey. The     combination of deletion and viewing enables a complete walk through all snapshot data while resulting in     complete snapshot data loss. This issue has been resolved in versions 8.1.6 and 7.5.11. If for some reason     you cannot upgrade you can use a reverse proxy or similar to block access to the literal paths:
    /api/snapshots/:key, /api/snapshots-delete/:deleteKey, /dashboard/snapshot/:key, and /api/snapshots/:key.
    They have no normal function and can be disabled without side effects. (CVE-2021-39226)

  - directory traversal vulnerability for *.md files (CVE-2021-43813)

  - net/http: limit growth of header canonicalization cache (CVE-2021-44716)

  - net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  - go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

  - Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)

  - client_golang is the instrumentation library for Go applications in Prometheus, and the promhttp package     in client_golang provides tooling around HTTP servers and clients. In client_golang prior to version     1.11.1, HTTP server is susceptible to a Denial of Service through unbounded cardinality, and potential     memory exhaustion, when handling requests with non-standard HTTP methods. In order to be affected, an     instrumented software must use any of `promhttp.InstrumentHandler*` middleware except `RequestsInFlight`;
    not filter any specific methods (e.g GET) before middleware; pass metric with `method` label name to our     middleware; and not have any firewall/LB/proxy that filters away requests with unknown `method`.
    client_golang version 1.11.1 contains a patch for this issue. Several workarounds are available, including     removing the `method` label name from counter/gauge used in the InstrumentHandler; turning off affected     promhttp handlers; adding custom middleware before promhttp handler that will sanitize the request method     given by Go http.Request; and using a reverse proxy or web application firewall, configured to only allow     a limited set of methods. (CVE-2022-21698)

  - XSS vulnerability in data source handling (CVE-2022-21702)

  - CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)

  - IDOR vulnerability can lead to information disclosure (CVE-2022-21713)

  - encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

  - io/fs: stack exhaustion in Glob (CVE-2022-30630)

  - compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  - path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  - encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

  - encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

  - OAuth account takeover (CVE-2022-31107)

  - net/http/httputil: NewSingleHostReverseProxy (CVE-2022-32148)

  - Escalation from admin to server admin when auth proxy is used (rhbz#2125530) (CVE-2022-35957)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2839-1 advisory.

    Updated to version 3.4.7:
    - CVE-2022-1227: Fixed an issue that could allow an attacker to publish       a malicious image to a public registry and run arbitrary code in the       victim's context via the 'podman top' command (bsc#1182428).
    - CVE-2022-27191: Fixed a potential crash via SSH under specific       configurations (bsc#1197284).
    - CVE-2022-21698: Fixed a potential denial of service that affected       servers that used Prometheus instrumentation (bsc#1196338).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:6061 advisory.

    The etcd packages provide a highly available key-value store for shared configuration.

    Security Fix(es):

    * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

    * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-21aa9bae12 advisory.

    Automatic update for golang-github-docker-distribution-2.8.1-2.20220821gitbc6b745.fc37.

    ##### **Changelog**

    ```
    * Sun Aug 21 2022 Robert-Andr Mauchin <zebob.m@gmail.com> 2.8.1-2
    - Update to 2.8.1, commit bc6b7455cb168d3000c18714ee1c57d2cd03b953 - Close:
      rhbz#2043861 rhbz#2067428 rhbz#2067396 rhbz#2045498
    * Sun Aug 21 2022 Robert-Andr Mauchin <zebob.m@gmail.com> 2.8.1-1
    - Update to 2.8.1, commit bc6b7455cb168d3000c18714ee1c57d2cd03b953 - Close:
      rhbz#2043861 rhbz#2067428 rhbz#2067396 rhbz#2045498
    * Wed Aug 10 2022 Maxwell G <gotmax@e.email> - 2.7.1-12
    - Rebuild to fix FTBFS
    * Thu Jul 21 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.1-11
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_37_Mass_Rebuild
    * Tue Jul 19 2022 Maxwell G <gotmax@e.email> - 2.7.1-10
    - Rebuild for CVE-2022-{1705,32148,30631,30633,28131,30635,30632,30630,1962} in       golang
    * Sat Jun 18 2022 Robert-Andr Mauchin <zebob.m@gmail.com> - 2.7.1-9
    - Rebuilt for CVE-2022-1996, CVE-2022-24675, CVE-2022-28327, CVE-2022-27191,       CVE-2022-29526, CVE-2022-30629
    * Thu Jan 20 2022 Fedora Release Engineering <releng@fedoraproject.org> - 2.7.1-8
    - Rebuilt for https://fedoraproject.org/wiki/Fedora_36_Mass_Rebuild

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2022:7529 advisory.

  - golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  - cri-o: memory exhaustion on the node when access to the kube api (CVE-2022-1708)

  - golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

  - prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)

  - golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

  - golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

  - golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  - golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  - golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

  - golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2022-4363:06 advisory.

    * sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)
      * golang: net/[http:](http:) improper sanitization of Transfer-Encoding header (CVE-2022-1705)
      * golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)
      * grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)
      * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)
      * grafana: XSS vulnerability in data source handling (CVE-2022-21702)
      * grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)
      * grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)
      * golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)
      * golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)
      * golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)
      * golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)
      * golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)
      * golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)
      * golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working     (CVE-2022-32148)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2022:1762 advisory.

    * psgo: Privilege escalation in 'podman top' (CVE-2022-1227)

    * prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)

    * podman: Default inheritable capabilities for linux container should be empty (CVE-2022-27649)

    * crun: Default inheritable capabilities for linux container should be empty (CVE-2022-27650)

    * buildah: Default inheritable capabilities for linux container should be empty (CVE-2022-27651)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2022:7519 advisory.

  - sanitize-url: XSS due to improper sanitization in sanitizeUrl function (CVE-2021-23648)

  - golang: net/http: improper sanitization of Transfer-Encoding header (CVE-2022-1705)

  - golang: go/parser: stack exhaustion in all Parse* functions (CVE-2022-1962)

  - grafana: Forward OAuth Identity Token can allow users to access some data sources (CVE-2022-21673)

  - prometheus/client_golang: Denial of service using InstrumentHandlerCounter (CVE-2022-21698)

  - grafana: XSS vulnerability in data source handling (CVE-2022-21702)

  - grafana: CSRF vulnerability can lead to privilege escalation (CVE-2022-21703)

  - grafana: IDOR vulnerability can lead to information disclosure (CVE-2022-21713)

  - golang: encoding/xml: stack exhaustion in Decoder.Skip (CVE-2022-28131)

  - golang: io/fs: stack exhaustion in Glob (CVE-2022-30630)

  - golang: compress/gzip: stack exhaustion in Reader.Read (CVE-2022-30631)

  - golang: path/filepath: stack exhaustion in Glob (CVE-2022-30632)

  - golang: encoding/xml: stack exhaustion in Unmarshal (CVE-2022-30633)

  - golang: encoding/gob: stack exhaustion in Decoder.Decode (CVE-2022-30635)

  - golang: net/http/httputil: NewSingleHostReverseProxy - omit X-Forwarded-For not working (CVE-2022-32148)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
167790	Rocky Linux 8 : grafana (RLSA-2022:7519)	Nessus	Rocky Linux Local Security Checks	11/17/2022	11/7/2023	high
170778	Rocky Linux 9 : grafana (RLSA-2022:8057)	Nessus	Rocky Linux Local Security Checks	1/30/2023	11/7/2023	high
161275	Oracle Linux 8 : container-tools:ol8 (ELSA-2022-1762)	Nessus	Oracle Linux Local Security Checks	5/18/2022	11/2/2024	high
328919	openSUSE 16 Security Update : ctop (openSUSE-SU-2026:21379-1)	Nessus	SuSE Local Security Checks	7/22/2026	7/22/2026	medium
191236	CentOS 9 : grafana-9.0.9-1.el9	Nessus	CentOS Local Security Checks	2/29/2024	4/26/2024	high
164314	SUSE SLES15 / openSUSE 15 Security Update : podman (SUSE-SU-2022:2839-1)	Nessus	SuSE Local Security Checks	8/20/2022	6/25/2026	high
164130	RHEL 8 : Red Hat OpenStack Platform 16.2 (etcd) (RHSA-2022:6061)	Nessus	Red Hat Local Security Checks	8/15/2022	11/7/2024	high
211424	Fedora 37 : golang-github-docker-distribution (2022-21aa9bae12)	Nessus	Fedora Local Security Checks	11/15/2024	11/15/2024	critical
167185	CentOS 8 : container-tools:3.0 (CESA-2022:7529)	Nessus	CentOS Local Security Checks	11/9/2022	10/5/2023	medium
293531	MiracleLinux 8 : grafana-7.5.15-3.el8 (AXSA:2022-4363:06)	Nessus	Miracle Linux Local Security Checks	1/20/2026	2/24/2026	high
161143	AlmaLinux 8 : container-tools:rhel8 (ALSA-2022:1762)	Nessus	Alma Linux Local Security Checks	5/12/2022	1/13/2025	high
167149	CentOS 8 : grafana (CESA-2022:7519)	Nessus	CentOS Local Security Checks	11/9/2022	10/5/2023	high

Detections

Analytics

Plugins Search

high

high

high

medium

high

high

high

critical

medium

high

high

high