Security Advisory

CVE-2020-12459

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-04-29 15:56:56
Last updated 2024-08-04 11:56:52
Assigner mitre
State PUBLISHED

Description

In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.