Security Advisory
CVE-2020-12459
5.5
MEDIUM
Vulnerability Description
In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.
Published Date
April 29, 2020
Official Source
NIST NVD Advisory