Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
redhatRedHatRHSA-2019:0019
HistoryJan 03, 2019 - 5:35 p.m.

(RHSA-2019:0019) Moderate: grafana security and bug fix update

2019-01-0317:35:51
access.redhat.com
127

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON

The grafana package provides the Grafana metrics dashboard and graph editor.

Security Fix(es):

  • grafana: authentication bypass knowing only a username of an LDAP or OAuth user (CVE-2018-15727)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Bug Fix(es):

  • The grafana package has been upgraded to upstream version 5.2.4., which includes a number of bug fixes (BZ#1647494)

  • Shrinking the cluster size no longer causes the Red Hat Ceph Storage Dashboard to display the error message Templating init failed (BZ#1653273)

OSVersionArchitecturePackageVersionFilename
RedHat7x86_64grafana< 5.2.4-1.el7cpgrafana-5.2.4-1.el7cp.x86_64.rpm

Related

nessus 2
veracode 5
osv 4
ubuntucve 2
cve 3
openvas 2
github 2
redhat 1
prion 2
redhatcve 2
nessus
nessus
RHEL 7 : grafana (RHSA-2019:0019)
2019-01-07 00:00:00
RHEL 7 : RHGS WA (RHSA-2018:3829)
2018-12-17 00:00:00
veracode
veracode
Authentication Bypass
2018-08-30 05:17:12
Authentication Bypass
2019-01-15 09:27:17
Cross-Site Scripting (XSS)
2019-03-06 06:17:52
osv
osv
Grafana Authentication Bypass
2022-02-15 01:57:18
CVE-2018-15727
2018-08-29 15:29:00
CVE-2018-18623
2020-06-02 17:15:11
ubuntucve
ubuntucve
CVE-2018-15727
2018-08-29 00:00:00
CVE-2018-18623
2020-06-02 00:00:00
cve
cve
CVE-2018-15727
2018-08-29 15:29:00
CVE-2018-18623
2020-06-02 17:15:00
CVE-2018-558213
2018-08-29 15:29:00
openvas
openvas
Grafana < 6.0.0 XSS Vulnerability
2024-01-08 00:00:00
Grafana Authentication Bypass Vulnerability
2018-08-31 00:00:00
github
github
Grafana Authentication Bypass
2022-02-15 01:57:18
Grafana XSS in Dashboard Text Panel
2024-01-30 23:47:48
redhat
redhat
(RHSA-2018:3829) Moderate: RHGS WA security and bug fix update
2018-12-17 04:49:19
prion
prion
Authentication flaw
2018-08-29 15:29:00
Default credentials
2020-06-02 17:15:00
redhatcve
redhatcve
CVE-2018-15727
2018-08-30 22:18:55
CVE-2018-18623
2020-06-24 13:50:59

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.017 Low

EPSS

Percentile

87.7%

JSON
Related for RHSA-2019:0019
nessus2veracode5osv4ubuntucve2cve3openvas2github2redhat1prion2redhatcve2