PT-2018-14764 · Grafana+1 · Grafana+1

Daniele Costa

·

Publicado

2018-12-13

·

Atualizado

2024-06-15

·

CVE-2018-19039

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Grafana versions prior to 4.6.5 Grafana versions 5.x prior to 5.3.3
Description The issue allows remote authenticated users with Editor or Admin permissions to read arbitrary files.
Recommendations For versions prior to 4.6.5, update to version 4.6.5 or later. For versions 5.x prior to 5.3.3, update to version 5.3.3 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

ALT-PU-2018-2838
CVE-2018-19039
OPENSUSE-SU-2020:1611-1
OPENSUSE-SU-2024:10818-1
RHSA-2019:0747
RHSA-2019:0911
SUSE-OU-2019:2022-1
SUSE-OU-2019:2023-1
SUSE-SU-2019:2046-1
SUSE-SU-2019:2671-1
SUSE-SU-2019:2867-1
SUSE-SU-2020:1273-1
SUSE-SU-2021:1962-1

Produtos afetados

Alt Linux
Grafana