Emergency maintenance - Elite Dashboard and reporting system
Scheduled Maintenance Report for Elite Limited
Postmortem

More information can be found here: https://grafana.com/blog/2021/12/08/an-update-on-0day-cve-2021-43798-grafana-directory-traversal/?utm_source=grafana_news&utm_medium=rss

CVE-2021-43798: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-43798

Posted Dec 09, 2021 - 15:27 GMT
Completed
Elite is now running Grafana v8.3.1

Software upgrade is now complete
Posted Dec 09, 2021 - 15:15 GMT
Scheduled
Elite's dashboard system is currently vulnerable to CVE-2021-43798.

Software update is currently being performed on the dashboard server. Elite is upgrading from 8.3.0 to 8.3.1 to prevent this issue from impacting customer data in the event of an attack.

Summary:

Path traversal attack => Attacker can read any file on server.
Only affects version 8.x. Patched in 8.3.1, 8.2.7, 8.1.8, and 8.0.7
Posted Dec 09, 2021 - 15:15 GMT
This scheduled maintenance affected: Customer Portals, Tools & Contact (Ethernet Graphing & Monitoring Portal).
← Current Status Powered by Atlassian Statuspage