{"id":"CVE-2018-15727","published":"2018-08-29T15:00:00Z","modified":"2024-08-05T10:01:54Z","title":"Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid \"remember me\" cookie knowing only a username of an LDAP or OAuth user.","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw lies in Grafana's authentication handling for its 2.x, 3.x and 4.x releases before 4.6.4 and its 5.x releases before 5.2.3, where the \"remember me\" cookie can be forged.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:21:11Z"},"cvss":null,"epss":{"score":0.64284,"percentile":0.9923,"date":"2026-10-30","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.securityfocus.com/bid/105184","tags":["vdb-entry","x_refsource_BID"]},{"url":"https://access.redhat.com/errata/RHSA-2019:0019","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2018:3829","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://grafana.com/blog/2018/08/29/grafana-5.2.3-and-4.6.4-released-with-important-security-fix/","tags":["x_refsource_CONFIRM"]}],"techniques":[],"reports":[],"affected":[{"ecosystem":"Go","package":"github.com/grafana/grafana","vulnerableRanges":["<4.6.4",">=5.0.0, <5.2.3","<4.6.4+incompatible",">=5.0.0+incompatible, <5.2.3+incompatible"],"patched":["4.6.4","5.2.3","4.6.4+incompatible","5.2.3+incompatible"],"from":["GHSA-rgjg-66cx-5x9m","GO-2022-0707"],"provenance":"source"}],"advisories":[{"id":"GHSA-rgjg-66cx-5x9m","url":"https://github.com/advisories/GHSA-rgjg-66cx-5x9m","severity":"CRITICAL","ecosystem":"Go","package":"github.com/grafana/grafana","vulnerableRanges":["<4.6.4"],"patched":["4.6.4"],"provenance":"source","from":"GHSA"},{"id":"GHSA-rgjg-66cx-5x9m","url":"https://github.com/advisories/GHSA-rgjg-66cx-5x9m","severity":"CRITICAL","ecosystem":"Go","package":"github.com/grafana/grafana","vulnerableRanges":[">=5.0.0, <5.2.3"],"patched":["5.2.3"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2022-1171","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-1171","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":1,"skipped":0,"earliest":"2018-08-29","earliestUrl":"https://github.com/u238/grafana-CVE-2018-15727","repos":[{"name":"u238/grafana-CVE-2018-15727","url":"https://github.com/u238/grafana-CVE-2018-15727","stars":23,"created":"2018-08-29"}]},"metasploit":[{"name":"Grafana 2.0 through 5.2.2 authentication bypass for LDAP and OAuth","module":"auxiliary/admin/http/grafana_auth_bypass","type":"auxiliary","disclosureDate":"2019-08-14","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/grafana_auth_bypass.py"}],"first":{"date":"2018-08-29","source":"PoC-in-GitHub","url":"https://github.com/u238/grafana-CVE-2018-15727"},"provenance":"source"},"exploitRefs":[],"flow":[],"timeline":[{"date":"2018-08-29","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2018-15727","provenance":"source"},{"date":"2018-08-29","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub; later: Metasploit 2019-08-14","url":"https://github.com/u238/grafana-CVE-2018-15727","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"PoC-in-GitHub","daysToKev":null},"priority":{"score":24.8,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.85,"detail":"percentile 0.9923"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"1 PoC-in-GitHub repo; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-grafana-enterprise-cve-2018-15727","children":[{"from":"CVE-2018-15727","to":"CVE-2020-12458","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["pkg/services/sqlstore/migrator/migrator.go"],"commits":["https://github.com/grafana/grafana/commit/7baecf0d0deae0d865e45cf03e082bc0db3f28c3","https://github.com/grafana/grafana/commit/df83bf10a225811927644bdf6265fa80bdea9137","https://github.com/grafana/grafana/commit/102448040d5132460e3b0013e03ebedec0677e00"],"basis":"shared function","functions":["Start"]}]},{"from":"CVE-2018-15727","to":"CVE-2020-12459","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["pkg/services/sqlstore/migrator/migrator.go"],"commits":["https://github.com/grafana/grafana/commit/7baecf0d0deae0d865e45cf03e082bc0db3f28c3","https://github.com/grafana/grafana/commit/df83bf10a225811927644bdf6265fa80bdea9137","https://github.com/grafana/grafana/commit/102448040d5132460e3b0013e03ebedec0677e00"],"basis":"shared function","functions":["Start"]}]},{"from":"CVE-2018-15727","to":"CVE-2025-41115","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["pkg/services/sqlstore/migrations/user_mig.go"],"commits":["https://github.com/grafana/grafana/commit/7baecf0d0deae0d865e45cf03e082bc0db3f28c3","https://github.com/grafana/grafana/commit/df83bf10a225811927644bdf6265fa80bdea9137","https://github.com/grafana/grafana/commit/ca5d89812015ef2db3acc62826f73650450b331e"],"basis":"shared function","functions":["addUserMigrations"]}]}],"packageHistory":[{"cve":"CVE-2026-33380","published":"2026-05-13","fixed":"1.9.2-0.20260513165311-fb7336fc36c1","kev":false},{"cve":"CVE-2026-33381","published":"2026-05-13","fixed":"1.9.2-0.20260513165311-fb7336fc36c1","kev":false},{"cve":"CVE-2018-12099","published":"2018-06-11","fixed":"5.2.0-beta1+incompatible","kev":false,"link":{"from":"CVE-2018-12099","to":"CVE-2018-15727","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:github.com/grafana/grafana","fromFixed":"5.2.0-beta1+incompatible","toFixed":"5.2.3","daysApart":79}]}},{"cve":"CVE-2018-15727","published":"2018-08-29","fixed":"5.2.3+incompatible","kev":false},{"cve":"CVE-2018-1000816","published":"2018-12-20","fixed":"5.3.2","kev":false,"link":{"from":"CVE-2018-15727","to":"CVE-2018-1000816","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Go:github.com/grafana/grafana","fromFixed":"5.2.3+incompatible","toFixed":"5.3.2","daysApart":113}]}},{"cve":"CVE-2018-18623","published":"2020-06-02","fixed":"6.0.0-beta1+incompatible","kev":false},{"cve":"CVE-2018-18625","published":"2020-06-02","fixed":"6.0.0-beta1+incompatible","kev":false}],"package":"Go:github.com/grafana/grafana"}}