Advisories for Golang/Github.com/Grafana/Synthetic-Monitoring-Agent/Cmd/Synthetic-Monitoring-Agent package

2022

Authentication Token Exposure

The Synthetic Monitoring Agent for Grafana's Synthetic Monitoring application provides probe functionality and executes network checks for monitoring remote targets. Users running the Synthetic Monitoring agent prior to version 0.12.0 in their local network are impacted. The authentication token used to communicate with the Synthetic Monitoring API is exposed through a debugging endpoint. This token can be used to retrieve the Synthetic Monitoring checks created by the user and assigned …