| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/grafana/grafana | ≥ 6.0.0-beta1, < 7.2.1all versions | 7.2.1 |
| grafana | ≥ 6.0.0, ≤ 6.3.6 |
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free