{"id":"CVE-2020-12458","published":"2020-04-29T15:57:05Z","modified":"2024-08-04T11:56:52Z","title":"An information-disclosure flaw was found in Grafana through 6.7.3","vendor":null,"product":null,"tier":"tail","description":{"text":"An information-disclosure flaw was found in Grafana through 6.7.3. The database directory /var/lib/grafana and database file /var/lib/grafana/grafana.db are world readable. This can result in exposure of sensitive information (e.g., cleartext or encrypted datasource passwords).","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.00488,"percentile":0.42037,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/grafana/grafana/issues/8283","tags":["x_refsource_MISC"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1827765","tags":["x_refsource_MISC"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-12458","tags":["x_refsource_CONFIRM"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CTQCKJZZYXMCSHJFZZ3YXEO5NUBANGZS/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/WEBCIEVSYIDDCA7FTRS2IFUOYLIQU34A/","tags":["vendor-advisory","x_refsource_FEDORA"]},{"url":"https://security.netapp.com/advisory/ntap-20200518-0001/","tags":["x_refsource_CONFIRM"]}],"priority":{"score":8.4,"factors":[{"name":"EPSS percentile","points":8.41}]},"affected":[{"ecosystem":"Go","package":"github.com/grafana/grafana","vulnerableRanges":["<7.2.1","all versions"],"patched":["7.2.1"],"from":["GHSA-3jq7-8ph8-63xm","GO-2024-2513"],"provenance":"source"}],"euvd":{"id":"EUVD-2022-2203","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-grafana-enterprise-cve-2018-15727","parents":[{"from":"CVE-2018-15727","to":"CVE-2020-12458","relation":"related","confidence":"medium","kind":"lineage","evidence":[{"kind":"same-code","provenance":"machine","files":["pkg/services/sqlstore/migrator/migrator.go"],"commits":["https://github.com/grafana/grafana/commit/7baecf0d0deae0d865e45cf03e082bc0db3f28c3","https://github.com/grafana/grafana/commit/df83bf10a225811927644bdf6265fa80bdea9137","https://github.com/grafana/grafana/commit/102448040d5132460e3b0013e03ebedec0677e00"],"basis":"shared function","functions":["Start"]}]}]}}