CVE-2022-36062

CVE-2022-36062 is a low-severity privilege escalation vulnerability affecting Grafana versions prior to 8.5.13, 9.0.9, and 9.1.6. It occurs when Role-Based Access Control (RBAC) is enabled after being disabled, leading to improper permission preservation on folders where only Admin permissions were initially set. This allows Editors and Viewers to gain unauthorized access to edit and view these folders. The CVSS score is 3.8 (Low), indicating a network attack vector with low complexity, requiring high privileges, and resulting in limited confidentiality and integrity impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.