CVE-2018-19039
CVE-2018-19039
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.
CVSS 6.5 · Medium · EPSS 7.3%
- Published
- Updated
Stack: system · applications
Affected products and versions
Original sources
- http://www.securityfocus.com/bid/105994
- https://community.grafana.com/t/grafana-5-3-3-and-4-6-5-security-update/11961
- https://www.percona.com/blog/2018/11/20/how-cve-2018-19039-affects-percona-monitoring-and-management/
- https://access.redhat.com/errata/RHSA-2019:0747
- https://security.netapp.com/advisory/ntap-20190416-0004/
- https://access.redhat.com/errata/RHSA-2019:0911
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html
- https://nvd.nist.gov/vuln/detail/CVE-2018-19039