| Max CVSS | 2.1 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2020-12459 | 2.1 |
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
|
26-04-2022 - 17:45 | 29-04-2020 - 16:15 | |
| CVE-2020-12458 | 2.1 |
An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encr
|
26-04-2022 - 17:44 | 29-04-2020 - 16:15 |