Lucene search

K
osvGoogleOSV:GHSA-3JQ7-8PH8-63XM
HistoryMay 24, 2022 - 5:16 p.m.

Grafana information disclosure

2022-05-2417:16:53
Google
osv.dev
4

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.8%

An information-disclosure flaw was found in Grafana. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).

CPENameOperatorVersion
github.com/grafana/grafanalt7.2.1

6.2 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

26.8%