grafana is vulnerable to information disclosure. This is because the database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable.
access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
access.redhat.com/errata/RHSA-2020:4682
access.redhat.com/security/cve/CVE-2020-12458
access.redhat.com/security/updates/classification/#moderate
bugzilla.redhat.com/show_bug.cgi?id=1827765
github.com/grafana/grafana/issues/8283
lists.fedoraproject.org/archives/list/[email protected]/message/CTQCKJZZYXMCSHJFZZ3YXEO5NUBANGZS/
lists.fedoraproject.org/archives/list/[email protected]/message/WEBCIEVSYIDDCA7FTRS2IFUOYLIQU34A/
security.netapp.com/advisory/ntap-20200518-0001/