PT-2018-14764 · Grafana+1 · Grafana+1

Daniele Costa

·

Published

2018-12-13

·

Updated

2024-06-15

·

CVE-2018-19039

CVSS v3.1

6.5

Medium

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Grafana versions prior to 4.6.5 Grafana versions 5.x prior to 5.3.3
Description The issue allows remote authenticated users with Editor or Admin permissions to read arbitrary files.
Recommendations For versions prior to 4.6.5, update to version 4.6.5 or later. For versions 5.x prior to 5.3.3, update to version 5.3.3 or later.

Fix

Information Disclosure

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-200

Related Identifiers

ALT-PU-2018-2838
CVE-2018-19039
OPENSUSE-SU-2020:1611-1
OPENSUSE-SU-2024:10818-1
RHSA-2019:0747
RHSA-2019:0911
SUSE-OU-2019:2022-1
SUSE-OU-2019:2023-1
SUSE-SU-2019:2046-1
SUSE-SU-2019:2671-1
SUSE-SU-2019:2867-1
SUSE-SU-2020:1273-1
SUSE-SU-2021:1962-1

Affected Products

Alt Linux
Grafana