En bref
- CVE-2020-12458 est une vulnérabilité MOYENNE (CVSS 5.5) touchant github.com/grafana/grafana, grafana (grafana), ceph storage (redhat).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.49%, plus élevée que 42.0% des vulnérabilités.
- Correctif : mettre à jour vers 7.2.1 ou plus récent.
Description
An information-disclosure flaw was found in Grafana. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
NVD description
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
Autres vulnérabilités de github.com/grafana/grafana
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free