Critical severity9.8NVD Advisory· Published May 20, 2022· Updated Jun 17, 2026
CVE-2022-28660
CVE-2022-28660
Description
The querier component in Grafana Enterprise Logs 1.1.x through 1.3.x before 1.4.0 does not require authentication when X-Scope-OrgID is used. Versions 1.2.1, 1.3.1, and 1.4.0 contain the bugfix. This affects -auth.type=enterprise in microservices mode
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5- Range: <1.4.0
Patches
Vulnerability mechanics
References
2- grafana.com/docs/enterprise-logs/latest/gel-releases/nvdRelease NotesVendor Advisory
- security.netapp.com/advisory/ntap-20220707-0004/nvdThird Party Advisory
News mentions
0No linked articles in our index yet.