Non-encrypted confidential information In github.com/grafana/grafana
Description
Grafana information disclosure
An information-disclosure flaw was found in Grafana. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 go | 7.2.1 | ||
 rpm rhel8 | 0:6.7.4-3.el8 |
Aliases
1. 2. 3. 4. 5.
References
1. 2. 3. 4. 5. 6.