Security Advisory

CVE-2019-15043

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-09-03 11:47:35
Last updated 2024-08-05 00:34:53
Assigner mitre
State PUBLISHED

Description

In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.