Vulnerability found in Grafana version used for Spectrum Performance View

Products

• CA Spectrum
• DX NetOps

Issue/Introduction

Grafana Vulnerability Question

Our security team has identified a vulnerability for Grafana. I know I worked with someone to set it up on our system, so I was wondering if you had any recommendations to address it or not since we downloaded the actual Grafana software ourselves.

Environment

Release : Any

Component : Spectrum Applications

Resolution

Spectrum does not ship Grafana nor does it recommend a specific version of Grafana to use with the Spectrum Performance View.

Upgrade to a version of Grafana as recommended in the following link.

https://grafana.com/blog/2021/12/07/grafana-8.3.1-8.2.7-8.1.8-and-8.0.7-released-with-high-severity-security-fix/