Back to search
CVE-2018-15727
Published: Aug 29, 2018
Modified: Aug 5, 2024
PUBLISHED
Description
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
105184
vdb-entry
x_refsource_BID
RHSA-2019:0019
vendor-advisory
x_refsource_REDHAT
RHSA-2018:3829
vendor-advisory
x_refsource_REDHAT
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now