CVE-2023-3128 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2023-3128 Interim 1 14 2023-10-13T23:12:51Z current 2023-06-23T23:19:17Z 2023-10-13T23:12:51Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2023-3128 Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app. The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2023-August/015765.html E-Mail link for SUSE-CU-2023:2514-1 https://lists.suse.com/pipermail/sle-security-updates/2023-September/016269.html E-Mail link for SUSE-CU-2023:3071-1 https://lists.suse.com/pipermail/sle-updates/2023-July/030439.html E-Mail link for SUSE-SU-2023:2915-1 https://lists.suse.com/pipermail/sle-updates/2023-July/030438.html E-Mail link for SUSE-SU-2023:2916-1 https://lists.suse.com/pipermail/sle-updates/2023-July/030437.html E-Mail link for SUSE-SU-2023:2917-1 https://lists.suse.com/pipermail/sle-security-updates/2023-August/015741.html E-Mail link for SUSE-SU-2023:3136-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings Container ses/7.1/ceph/grafana:9.5.5.3.4.156 Container suse/manager/4.3/proxy-httpd:susemanager-4.3.7.9.34.1 HPE Helion OpenStack 8 Image SLES15-SP4-Manager-Proxy-4-3-BYOS Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE Image SLES15-SP4-Manager-Server-4-3-BYOS Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE SUSE Linux Enterprise Module for Package Hub 15 SP4 SUSE Linux Enterprise Module for Package Hub 15 SP5 SUSE Manager Server 4.3 SUSE Manager Tools 12 SUSE Manager Tools 15 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 8 SUSE OpenStack Cloud Crowbar 9 openSUSE Leap 15.4 openSUSE Leap 15.5 openSUSE Tumbleweed SLES 15 SP1 CHOST Images for Amazon EC2 suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64 SLES 15 SP1 CHOST Images for Amazon EC2 suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64 SLES 15 SP1 CHOST Images for Amazon EC2 suse-sles-15-sp1-chost-byos-v20220715-hvm-ssd-x86_64 SLES 15 SP2 CHOST Images for Amazon EC2 suse-sles-15-sp2-chost-byos-v20210610-hvm-ssd-x86_64 SLES 15 SP2 CHOST Images for Amazon EC2 suse-sles-15-sp2-chost-byos-v20210722-hvm-ssd-x86_64 SLES 15 SP2 CHOST Images for Amazon EC2 suse-sles-15-sp2-chost-byos-v20210913-hvm-ssd-x86_64 SLES 15 SP2 CHOST Images for Amazon EC2 suse-sles-15-sp2-chost-byos-v20211025-hvm-ssd-x86_64 SLES 15 SP2 CHOST Images for Amazon EC2 suse-sles-15-sp2-chost-byos-v20220126-hvm-ssd-x86_64 SLES 15 SP2 CHOST Images for Amazon EC2 suse-sles-15-sp2-chost-byos-v20220718-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20210729-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20210827-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20210927-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20211004-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20211101-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20211202-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220103-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220126-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220222-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220310-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220411-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220510-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220608-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220708-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220718-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220818-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220916-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20220921-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20221019-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20221119-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20221215-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20230313-hvm-ssd-x86_64 SLES 15 SP3 CHOST Images for Amazon EC2 suse-sles-15-sp3-chost-byos-v20230613-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20220718-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20220721-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20220819-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20220916-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20220923-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20221018-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20221118-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20221215-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230111-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230210-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230310-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230410-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230510-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230606-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230704-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230803-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230901-hvm-ssd-x86_64 SLES 15 SP4 CHOST Images for Amazon EC2 suse-sles-15-sp4-chost-byos-v20230928-hvm-ssd-x86_64 SLES 15 SP1 CHOST Images for Google sles-15-sp1-chost-byos-v20210202 SLES 15 SP1 CHOST Images for Google sles-15-sp1-chost-byos-v20210304 SLES 15 SP1 CHOST Images for Google sles-15-sp1-chost-byos-v20220127 SLES 15 SP1 CHOST Images for Google sles-15-sp1-chost-byos-v20220715-x86-64 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20210202 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20210304 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20210405 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20210506 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20210610 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20210722 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20210913 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20211025 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20220126 SLES 15 SP2 CHOST Images for Google sles-15-sp2-chost-byos-v20220718-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20210729 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20210827 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20210927 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20211004 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20211101 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20211202 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220103 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220126 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220222 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220310 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220411-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220510-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220608-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220708-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220718-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220818-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20220916-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20221019-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20221118-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20221215-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20230313-x86-64 SLES 15 SP3 CHOST Images for Google sles-15-sp3-chost-byos-v20230613-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20220718-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20220721-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20220818-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20220916-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20221018-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20221118-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20221215-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20221215-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230111-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230111-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230210-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230210-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230310-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230310-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230410-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230410-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230510-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230510-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230606-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230606-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230704-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230704-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230804-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230804-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230901-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230901-x86-64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230928-arm64 SLES 15 SP4 CHOST Images for Google sles-15-sp4-chost-byos-v20230928-x86-64 SLES 15 SP1 CHOST Images for Microsoft Azure suse-sles-15-sp1-chost-byos-v20210202 SLES 15 SP1 CHOST Images for Microsoft Azure suse-sles-15-sp1-chost-byos-v20210304 SLES 15 SP1 CHOST Images for Microsoft Azure suse-sles-15-sp1-chost-byos-v20220127 SLES 15 SP1 CHOST Images for Microsoft Azure suse-sles-15-sp1-chost-byos-v20220715-x86_64 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20210202 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20210304 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20210405 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20210506 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20210610 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20210722 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20210913 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20211025 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20220126 SLES 15 SP2 CHOST Images for Microsoft Azure suse-sles-15-sp2-chost-byos-v20220718-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20210729 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20210827 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20210927 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20211004 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20211101 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20211202 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220103 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220126 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220222 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220310 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220411-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220510-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220609-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220708-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220718-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220818-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220916-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20220921-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20221019-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20221119-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20221215-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20230313-x86_64 SLES 15 SP3 CHOST Images for Microsoft Azure suse-sles-15-sp3-chost-byos-v20230613-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20220718-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20220721-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20220819-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20220916-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20220923-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20221018-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20221118-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20221215-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20221215-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230111-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230111-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230210-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230210-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230310-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230310-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230410-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230410-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230510-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230510-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230606-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230606-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230704-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230704-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230803-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230803-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230901-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230901-x86_64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230928-arm64 SLES 15 SP4 CHOST Images for Microsoft Azure suse-sles-15-sp4-chost-byos-v20230928-x86_64 grafana grafana-10.0.1-1.1 grafana-9.5.5-1.51.1 grafana-9.5.5-150000.1.51.1 grafana-9.5.5-150200.3.44.1 release-notes-susemanager-4.3.7-150400.3.72.1 release-notes-susemanager-proxy-4.3.7-150400.3.58.1 grafana-9.5.5-150200.3.44.1 as a component of Container ses/7.1/ceph/grafana:9.5.5.3.4.156 release-notes-susemanager-proxy-4.3.7-150400.3.58.1 as a component of Container suse/manager/4.3/proxy-httpd:susemanager-4.3.7.9.34.1 release-notes-susemanager-proxy-4.3.7-150400.3.58.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS release-notes-susemanager-proxy-4.3.7-150400.3.58.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure release-notes-susemanager-proxy-4.3.7-150400.3.58.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2 release-notes-susemanager-proxy-4.3.7-150400.3.58.1 as a component of Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE release-notes-susemanager-4.3.7-150400.3.72.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS release-notes-susemanager-4.3.7-150400.3.72.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure release-notes-susemanager-4.3.7-150400.3.72.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2 release-notes-susemanager-4.3.7-150400.3.72.1 as a component of Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE grafana-9.5.5-150200.3.44.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP4 grafana-9.5.5-150200.3.44.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP5 release-notes-susemanager-4.3.7-150400.3.72.1 as a component of SUSE Manager Server 4.3 grafana-9.5.5-1.51.1 as a component of SUSE Manager Tools 12 grafana-9.5.5-150000.1.51.1 as a component of SUSE Manager Tools 15 grafana-9.5.5-150200.3.44.1 as a component of openSUSE Leap 15.4 grafana-9.5.5-150200.3.44.1 as a component of openSUSE Leap 15.5 grafana-10.0.1-1.1 as a component of openSUSE Tumbleweed grafana as a component of HPE Helion OpenStack 8 grafana as a component of SUSE OpenStack Cloud 8 grafana as a component of SUSE OpenStack Cloud 9 grafana as a component of SUSE OpenStack Cloud Crowbar 8 grafana as a component of SUSE OpenStack Cloud Crowbar 9 Grafana is validating Azure AD accounts based on the email claim. On Azure AD, the profile email field is not unique and can be easily modified. This leads to account takeover and authentication bypass when Azure AD OAuth is configured with a multi-tenant app. CVE-2023-3128 Container ses/7.1/ceph/grafana:9.5.5.3.4.156:grafana-9.5.5-150200.3.44.1 Container suse/manager/4.3/proxy-httpd:susemanager-4.3.7.9.34.1:release-notes-susemanager-proxy-4.3.7-150400.3.58.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS:release-notes-susemanager-proxy-4.3.7-150400.3.58.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure:release-notes-susemanager-proxy-4.3.7-150400.3.58.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2:release-notes-susemanager-proxy-4.3.7-150400.3.58.1 Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE:release-notes-susemanager-proxy-4.3.7-150400.3.58.1 Image SLES15-SP4-Manager-Server-4-3-BYOS:release-notes-susemanager-4.3.7-150400.3.72.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure:release-notes-susemanager-4.3.7-150400.3.72.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2:release-notes-susemanager-4.3.7-150400.3.72.1 Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE:release-notes-susemanager-4.3.7-150400.3.72.1 SUSE Linux Enterprise Module for Package Hub 15 SP4:grafana-9.5.5-150200.3.44.1 SUSE Linux Enterprise Module for Package Hub 15 SP5:grafana-9.5.5-150200.3.44.1 SUSE Manager Server 4.3:release-notes-susemanager-4.3.7-150400.3.72.1 SUSE Manager Tools 12:grafana-9.5.5-1.51.1 SUSE Manager Tools 15:grafana-9.5.5-150000.1.51.1 openSUSE Leap 15.4:grafana-9.5.5-150200.3.44.1 openSUSE Leap 15.5:grafana-9.5.5-150200.3.44.1 openSUSE Tumbleweed:grafana-10.0.1-1.1 HPE Helion OpenStack 8:grafana SUSE OpenStack Cloud 8:grafana SUSE OpenStack Cloud 9:grafana SUSE OpenStack Cloud Crowbar 8:grafana SUSE OpenStack Cloud Crowbar 9:grafana chost:amazon/suse-sles-15-sp1-chost-byos-v20210304-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp1-chost-byos-v20220127-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp1-chost-byos-v20220715-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp2-chost-byos-v20210610-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp2-chost-byos-v20210722-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp2-chost-byos-v20210913-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp2-chost-byos-v20211025-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp2-chost-byos-v20220126-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp2-chost-byos-v20220718-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20210729-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20210827-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20210927-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20211004-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20211101-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20211202-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220103-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220126-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220222-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220310-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220411-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220510-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220608-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220708-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220718-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220818-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220916-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20220921-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20221019-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20221119-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20221215-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20230313-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp3-chost-byos-v20230613-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20220718-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20220721-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20220819-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20220916-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20220923-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20221018-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20221118-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20221215-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230111-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230210-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230310-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230410-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230510-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230606-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230704-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230803-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230901-hvm-ssd-x86_64 chost:amazon/suse-sles-15-sp4-chost-byos-v20230928-hvm-ssd-x86_64 chost:google/sles-15-sp1-chost-byos-v20210202 chost:google/sles-15-sp1-chost-byos-v20210304 chost:google/sles-15-sp1-chost-byos-v20220127 chost:google/sles-15-sp1-chost-byos-v20220715-x86-64 chost:google/sles-15-sp2-chost-byos-v20210202 chost:google/sles-15-sp2-chost-byos-v20210304 chost:google/sles-15-sp2-chost-byos-v20210405 chost:google/sles-15-sp2-chost-byos-v20210506 chost:google/sles-15-sp2-chost-byos-v20210610 chost:google/sles-15-sp2-chost-byos-v20210722 chost:google/sles-15-sp2-chost-byos-v20210913 chost:google/sles-15-sp2-chost-byos-v20211025 chost:google/sles-15-sp2-chost-byos-v20220126 chost:google/sles-15-sp2-chost-byos-v20220718-x86-64 chost:google/sles-15-sp3-chost-byos-v20210729 chost:google/sles-15-sp3-chost-byos-v20210827 chost:google/sles-15-sp3-chost-byos-v20210927 chost:google/sles-15-sp3-chost-byos-v20211004 chost:google/sles-15-sp3-chost-byos-v20211101 chost:google/sles-15-sp3-chost-byos-v20211202 chost:google/sles-15-sp3-chost-byos-v20220103 chost:google/sles-15-sp3-chost-byos-v20220126 chost:google/sles-15-sp3-chost-byos-v20220222 chost:google/sles-15-sp3-chost-byos-v20220310 chost:google/sles-15-sp3-chost-byos-v20220411-x86-64 chost:google/sles-15-sp3-chost-byos-v20220510-x86-64 chost:google/sles-15-sp3-chost-byos-v20220608-x86-64 chost:google/sles-15-sp3-chost-byos-v20220708-x86-64 chost:google/sles-15-sp3-chost-byos-v20220718-x86-64 chost:google/sles-15-sp3-chost-byos-v20220818-x86-64 chost:google/sles-15-sp3-chost-byos-v20220916-x86-64 chost:google/sles-15-sp3-chost-byos-v20221019-x86-64 chost:google/sles-15-sp3-chost-byos-v20221118-x86-64 chost:google/sles-15-sp3-chost-byos-v20221215-x86-64 chost:google/sles-15-sp3-chost-byos-v20230313-x86-64 chost:google/sles-15-sp3-chost-byos-v20230613-x86-64 chost:google/sles-15-sp4-chost-byos-v20220718-x86-64 chost:google/sles-15-sp4-chost-byos-v20220721-x86-64 chost:google/sles-15-sp4-chost-byos-v20220818-x86-64 chost:google/sles-15-sp4-chost-byos-v20220916-x86-64 chost:google/sles-15-sp4-chost-byos-v20221018-x86-64 chost:google/sles-15-sp4-chost-byos-v20221118-x86-64 chost:google/sles-15-sp4-chost-byos-v20221215-arm64 chost:google/sles-15-sp4-chost-byos-v20221215-x86-64 chost:google/sles-15-sp4-chost-byos-v20230111-arm64 chost:google/sles-15-sp4-chost-byos-v20230111-x86-64 chost:google/sles-15-sp4-chost-byos-v20230210-arm64 chost:google/sles-15-sp4-chost-byos-v20230210-x86-64 chost:google/sles-15-sp4-chost-byos-v20230310-arm64 chost:google/sles-15-sp4-chost-byos-v20230310-x86-64 chost:google/sles-15-sp4-chost-byos-v20230410-arm64 chost:google/sles-15-sp4-chost-byos-v20230410-x86-64 chost:google/sles-15-sp4-chost-byos-v20230510-arm64 chost:google/sles-15-sp4-chost-byos-v20230510-x86-64 chost:google/sles-15-sp4-chost-byos-v20230606-arm64 chost:google/sles-15-sp4-chost-byos-v20230606-x86-64 chost:google/sles-15-sp4-chost-byos-v20230704-arm64 chost:google/sles-15-sp4-chost-byos-v20230704-x86-64 chost:google/sles-15-sp4-chost-byos-v20230804-arm64 chost:google/sles-15-sp4-chost-byos-v20230804-x86-64 chost:google/sles-15-sp4-chost-byos-v20230901-arm64 chost:google/sles-15-sp4-chost-byos-v20230901-x86-64 chost:google/sles-15-sp4-chost-byos-v20230928-arm64 chost:google/sles-15-sp4-chost-byos-v20230928-x86-64 chost:microsoft/suse-sles-15-sp1-chost-byos-v20210202 chost:microsoft/suse-sles-15-sp1-chost-byos-v20210304 chost:microsoft/suse-sles-15-sp1-chost-byos-v20220127 chost:microsoft/suse-sles-15-sp1-chost-byos-v20220715-x86_64 chost:microsoft/suse-sles-15-sp2-chost-byos-v20210202 chost:microsoft/suse-sles-15-sp2-chost-byos-v20210304 chost:microsoft/suse-sles-15-sp2-chost-byos-v20210405 chost:microsoft/suse-sles-15-sp2-chost-byos-v20210506 chost:microsoft/suse-sles-15-sp2-chost-byos-v20210610 chost:microsoft/suse-sles-15-sp2-chost-byos-v20210722 chost:microsoft/suse-sles-15-sp2-chost-byos-v20210913 chost:microsoft/suse-sles-15-sp2-chost-byos-v20211025 chost:microsoft/suse-sles-15-sp2-chost-byos-v20220126 chost:microsoft/suse-sles-15-sp2-chost-byos-v20220718-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20210729 chost:microsoft/suse-sles-15-sp3-chost-byos-v20210827 chost:microsoft/suse-sles-15-sp3-chost-byos-v20210927 chost:microsoft/suse-sles-15-sp3-chost-byos-v20211004 chost:microsoft/suse-sles-15-sp3-chost-byos-v20211101 chost:microsoft/suse-sles-15-sp3-chost-byos-v20211202 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220103 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220126 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220222 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220310 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220411-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220510-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220609-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220708-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220718-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220818-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220916-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20220921-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20221019-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20221119-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20221215-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20230313-x86_64 chost:microsoft/suse-sles-15-sp3-chost-byos-v20230613-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20220718-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20220721-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20220819-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20220916-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20220923-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20221018-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20221118-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20221215-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20221215-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230111-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230111-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230210-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230210-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230310-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230310-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230410-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230410-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230510-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230510-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230606-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230606-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230704-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230704-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230803-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230803-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230901-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230901-x86_64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230928-arm64 chost:microsoft/suse-sles-15-sp4-chost-byos-v20230928-x86_64 critical 9.4 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L