Lucene search

K
osvGoogleOSV:CVE-2020-12458
HistoryApr 29, 2020 - 4:15 p.m.

CVE-2020-12458

2020-04-2916:15:11
Google
osv.dev
8

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.8%

An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.8%