CVE:CVE-2018-19039
CNNVD:CNNVD-201811-676
Grafana是一套提供可视化监控界面的开源监控工具。该工具主要用于监控和分析Graphite、InfluxDB和Prometheus等。
Grafana 4.6.5之前版本和5.3.3之前的5.x版本中存在信息泄露漏洞。远程攻击者可利用该漏洞读取任意文件。
solution:Upgrade grafana grafana to a higher version than 4.6.5,5.3.3,and avoid the version (,4.6.5),[5.0.0,5.3.3); Upgrade redhat ceph_storage to a higher version than 3.0,and avoid the version 3.0; Upgrade redhat enterprise_linux_desktop to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_server to a higher version than 7.0,and avoid the version 7.0; Upgrade redhat enterprise_linux_workstation to a higher version than 7.0,and avoid the version 7.0; Upgrade netapp active_iq_performance_analytics_services to a higher version than -; Upgrade netapp storagegrid_webscale_nas_bridge to a higher version than -