Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2018-19039 Details

Grafana before 4.6.5 and 5.x before 5.3.3 allows remote authenticated users to read arbitrary files by leveraging Editor or Admin permissions.

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:6.5 MEDIUMVector:CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html	CVE
https://access.redhat.com/errata/RHSA-2019:0747	CVE	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0911	CVE	Third Party Advisory
https://community.grafana.com/t/grafana-5-3-3-and-4-6-5-security-update/11961	CVE	PatchVendor Advisory
https://security.netapp.com/advisory/ntap-20190416-0004/	CVE	Third Party Advisory
https://www.percona.com/blog/2018/11/20/how-cve-2018-19039-affects-percona-monitoring-and-management/	CVE	Third Party Advisory
http://www.securityfocus.com/bid/105994	CVE	Third Party AdvisoryVDB Entry
http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html	[email protected]
https://access.redhat.com/errata/RHSA-2019:0747	[email protected]	Third Party Advisory
https://access.redhat.com/errata/RHSA-2019:0911	[email protected]	Third Party Advisory
https://community.grafana.com/t/grafana-5-3-3-and-4-6-5-security-update/11961	[email protected]	PatchVendor Advisory
https://security.netapp.com/advisory/ntap-20190416-0004/	[email protected]	Third Party Advisory
https://www.percona.com/blog/2018/11/20/how-cve-2018-19039-affects-percona-monitoring-and-management/	[email protected]	Third Party Advisory
http://www.securityfocus.com/bid/105994	[email protected]	Third Party AdvisoryVDB Entry

CWE-ID	CWE Name	Source
CWE-200	Exposure of Sensitive Information to an Unauthorized Actor	[email protected]

Product	Versions
grafana grafana	< 4.6.5 >= 5.0.0, < 5.3.3
CPE cpe:2.3:a:grafana:grafana:::::::: Remediation No remediation found in references.
redhat ceph storage	3.0
CPE cpe:2.3:a:redhat:ceph_storage:3.0:::::::* Remediation No remediation found in references.
redhat enterprise linux desktop	7.0
CPE cpe:2.3:o:redhat:enterprise_linux_desktop:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux server	7.0
CPE cpe:2.3:o:redhat:enterprise_linux_server:7.0:::::::* Remediation No remediation found in references.
redhat enterprise linux workstation	7.0
CPE cpe:2.3:o:redhat:enterprise_linux_workstation:7.0:::::::* Remediation No remediation found in references.
netapp active iq performance analytics services	All versions
CPE cpe:2.3:a:netapp:active_iq_performance_analytics_services:-:::::::* Remediation No remediation found in references.
netapp storagegrid webscale nas bridge	All versions
CPE cpe:2.3:a:netapp:storagegrid_webscale_nas_bridge:-:::::::* Remediation No remediation found in references.

10 change records found show changes

QUICK INFO