¡¾Îó²îͨ¸æ¡¿GrafanaĿ¼±éÀúÎó²î£¨CVE-2021-43798£©
Ðû²¼Ê±¼ä 2021-12-080x00 Îó²î¸ÅÊö
CVE ID | CVE-2021-43798 | ʱ ¼ä | 2021-12-03 |
Àà ÐÍ | Ŀ¼±éÀú | µÈ ¼¶ | ¸ßΣ |
Ô¶³ÌʹÓà | ÊÇ | Ó°Ïì¹æÄ£ | |
¹¥»÷ÖØÆ¯ºó | µÍ | ¿ÉÓÃÐÔ | ÎÞ |
Óû§½»»¥ | ÎÞ | ËùÐèȨÏÞ | ÎÞ |
PoC/EXP | ÒѹûÕæ | ÔÚҰʹÓà | ÊÇ |
0x01 Îó²îÏêÇé
GrafanaÊÇÒ»¿îÓÃGoÓïÑÔ¿ª·¢µÄ¿ªÔ´Êý¾Ý¿ÉÊÓ»¯¹¤¾ß,¿ÉÒÔ×öÊý¾Ý¼à¿ØºÍÊý¾Ýͳ¼Æ,²¢´øÓи澯¹¦Ð§¡£¡£¡£¡£¡£¡£
2021Äê12ÔÂ3ÈÕ£¬£¬£¬£¬£¬£¬£¬Grafana LabsÐû²¼Ç徲ͨ¸æ£¬£¬£¬£¬£¬£¬£¬Grafana Öб£´æÒ»¸öĿ¼±éÀú0 dayÎó²î£¨CVE-2021-43798£©£¬£¬£¬£¬£¬£¬£¬ÔÊÐí»á¼ûÍâµØÎļþ£¬£¬£¬£¬£¬£¬£¬ÆäCVSSÆÀ·ÖΪ7.5¡£¡£¡£¡£¡£¡£12ÔÂ7ÈÕ£¬£¬£¬£¬£¬£¬£¬ÓÉÓÚ¸ÃÎó²îµÄÊÖÒÕϸ½ÚºÍPoCÒÑÔÚ»¥ÁªÍøÉϹûÕæ£¬£¬£¬£¬£¬£¬£¬Grafana Labs ÒÑÐû²¼ÐÞ¸´³ÌÐò¡£¡£¡£¡£¡£¡£
Îó²îµÄURL·¾¶Éæ¼°ÒÑ×°Öòå¼þµÄ²å¼þID£¬£¬£¬£¬£¬£¬£¬ÓÉÓÚÿ¸öGrafanaʵÀý¶¼ÓÐԤװµÄ²å¼þ£¬£¬£¬£¬£¬£¬£¬ÈçPrometheus²å¼þ»òMySQL²å¼þ£¬£¬£¬£¬£¬£¬£¬Òò´Ëÿ¸öʵÀý¶¼ÈÝÒ×Êܵ½¹¥»÷¡£¡£¡£¡£¡£¡£µ«Grafana CloudʵÀý²»ÊÜÓ°Ïì¡£¡£¡£¡£¡£¡£
¾ÝÌåÏÖ£¬£¬£¬£¬£¬£¬£¬ÏÖÔÚÓгÉǧÉÏÍò¸öGrafanaЧÀÍÆ÷̻¶ÔÚ»¥ÁªÍøÉÏ¡£¡£¡£¡£¡£¡£ÈôÊÇÎÞ·¨Éý¼¶¸üУ¬£¬£¬£¬£¬£¬£¬¿ÉÒÔÔÚGrafanaÇ°ÃæÔËÐÐÒ»¸ö·´ÏòÊðÀíÀ´¹æ·¶»¯ÇëÇóµÄ PATHÒÔ»º½â´ËÎó²î£¬£¬£¬£¬£¬£¬£¬»òʹ¸ÃЧÀÍÆ÷ÎÞ·¨´Ó¹«¹²ÍøÂçÉÏ»á¼û¡£¡£¡£¡£¡£¡£
Ó°Ïì¹æÄ£
Grafana 8.0.0-beta1 - 8.3.0
0x02 ´¦Öóͷ£½¨Òé
ÏÖÔÚGrafana LabsÒѾÐû²¼ÁËGrafana 8.3.1¡¢8.2.7¡¢8.1.8 ºÍ 8.0.7°æ±¾ £¬£¬£¬£¬£¬£¬£¬½¨ÒéÊÜÓ°ÏìµÄÓû§¾¡¿ìÉý¼¶¸üС£¡£¡£¡£¡£¡£
ÏÂÔØÁ´½Ó£º
https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/
0x03 ²Î¿¼Á´½Ó
https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/
https://www.bleepingcomputer.com/news/security/grafana-fixes-zero-day-vulnerability-after-exploits-spread-over-twitter/
https://nvd.nist.gov/vuln/detail/CVE-2021-43798
0x04 ¸üа汾
°æ±¾ | ÈÕÆÚ | ÐÞ¸ÄÄÚÈÝ |
V1.0 | 2021-12-08 | Ê×´ÎÐû²¼ |
0x05 ¹ØÓÚ¼øºÚµ£±£Íø
¼øºÚµ£±£Íø¼ò½é
¼øºÚµ£±£Íø¹«Ë¾½¨ÉèÓÚ1996Ä꣬£¬£¬£¬£¬£¬£¬²¢ÓÚ2010Äê6ÔÂ23ÈÕÔÚÉî½»ËùÖÐС°åÕýʽ¹ÒÅÆÉÏÊУ¬£¬£¬£¬£¬£¬£¬ÊǺ£ÄÚ×î¾ßʵÁ¦µÄÐÅÏ¢Çå¾²²úÆ·ºÍÇå¾²ÖÎÀíÆ½Ì¨¡¢Ç徲ЧÀÍÓë½â¾ö¼Æ»®µÄÁ캽ÆóÒµÖ®Ò»¡£¡£¡£¡£¡£¡£
¹«Ë¾×ܲ¿Î»ÓÚ±±¾©ÊÐÖйشåÈí¼þÔ°£¬£¬£¬£¬£¬£¬£¬ÔÚÌìϸ÷Ê¡¡¢ÊС¢×ÔÖÎÇøÉèÁ¢·ÖÖ§»ú¹¹ÁùÊ®¶à¸ö£¬£¬£¬£¬£¬£¬£¬ÓµÓÐÁýÕÖÌìϵÄÏúÊÛϵͳ¡¢ÇþµÀϵͳºÍÊÖÒÕÖ§³Öϵͳ£»£»£»²¢ÔÚ»ª±±¡¢»ª¶«¡¢Î÷ÄϺͻªÄϽṹËÄ´óÑз¢ÖÐÐÄ£¬£¬£¬£¬£¬£¬£¬»®·ÖΪ±±¾©Ñз¢×ܲ¿¡¢ÉϺ£Ñз¢ÖÐÐÄ¡¢³É¶¼Ñз¢ÖÐÐĺ͹ãÖÝÑз¢ÖÐÐÄ¡£¡£¡£¡£¡£¡£
¶àÄêÀ´£¬£¬£¬£¬£¬£¬£¬¼øºÚµ£±£ÍøÖÂÁ¦ÓÚÌṩ¾ßÓйú¼Ê¾ºÕùÁ¦µÄ×ÔÖ÷Á¢ÒìµÄÇå¾²²úÆ·ºÍ×î¼Ñʵ¼ùЧÀÍ£¬£¬£¬£¬£¬£¬£¬×ÊÖú¿Í»§ÖÜÈ«ÌáÉýÆäIT»ù´¡ÉèÊ©µÄÇå¾²ÐÔºÍÉú²úЧÄÜ£¬£¬£¬£¬£¬£¬£¬Îª´òÔìºÍÌáÉý¹ú¼Ê»¯µÄÃñ×åÐÅÏ¢Çå¾²¹¤ÒµÁì¾üÆ·ÅÆ¶ø²»Ð¸Æð¾¢¡£¡£¡£¡£¡£¡£
¹ØÓÚ¼øºÚµ£±£Íø
¼øºÚµ£±£ÍøÇå¾²Ó¦¼±ÏìÓ¦ÖÐÐÄÖ÷ÒªÕë¶ÔÖ÷ÒªÇå¾²Îó²îµÄÔ¤¾¯¡¢¸ú×ٺͷÖÏíÈ«Çò×îеÄÍþвÇ鱨ºÍÇå¾²±¨¸æ¡£¡£¡£¡£¡£¡£
¹Ø×¢ÒÔϹ«Öںţ¬£¬£¬£¬£¬£¬£¬»ñȡȫÇò×îÐÂÇå¾²×ÊѶ£º