PT-2018-3433 · Grafana+1 · Grafana+1

Published 2018-08-29 · Updated 2024-08-21 · CVE-2018-15727

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Grafana versions 2.x through 4.x before 4.6.4 Grafana versions 5.x before 5.2.3

Description: The issue is related to authentication errors in the Grafana web tool, allowing an attacker to bypass authentication. This can be achieved by generating a valid "remember me" cookie with knowledge of only a username of an LDAP or OAuth user. The exploitation of this issue may impact the confidentiality, integrity, and availability of protected information.

Recommendations: For Grafana versions 2.x through 4.x before 4.6.4, update to version 4.6.4 or later. For Grafana versions 5.x before 5.2.3, update to version 5.2.3 or later. As a temporary workaround, consider restricting access to the github.com/grafana/grafana/pkg/api endpoint until a patch is available. Avoid using the remember me cookie feature in affected versions until the issue is resolved.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

ALT-PU-2018-2486

BDU:2020-01361

CVE-2018-15727

ECHO-8B5E-2AAC-BACF

GHSA-RGJG-66CX-5X9M

GO-2022-0707

RHSA-2018:3829

RHSA-2019:0019

SUSE-SU-2019:2671-1

SUSE-SU-2019:2867-1

SUSE-SU-2020:1273-1

Affected Products

Alt Linux

Grafana

References · 126

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/grafana_auth_bypass.py · Exploit
• 🔥 https://github.com/u238/grafana-CVE-2018-15727 · Exploit
• https://osv.dev/vulnerability/GHSA-rgjg-66cx-5x9m · Vendor Advisory
• https://ubuntu.com/security/CVE-2018-15727 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-01361 · Security Note
• https://cve.org/CVERecord?id=CVE-2018-15727 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-15727 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2018-15727 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2867-1 · Vendor Advisory
• https://grafana.com/blog/2018/08/29/grafana-5.2.3-and-4.6.4-released-with-important-security-fix · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2020:1273-1 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2019:0019 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2018:3829 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2019:2671-1 · Vendor Advisory
• https://osv.dev/vulnerability/GO-2022-0707 · Vendor Advisory