| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/grafana/grafana | < 7.2.1all versions | 7.2.1 |
| grafana | ≤ 6.7.3 | |
| ceph storage | = 3.0= 4.0 |
An information-disclosure flaw was found in Grafana. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free