CVE-2018-15727
CRITICAL
9.8
CVSS Severity Score
Vulnerability Description
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.
Affected Platforms (CPE)
📦
Grafana
Grafana
>= 2.0.0 and <= 2.1.2📦
Grafana
Grafana
>= 3.0.0 and <= 3.1.1📦
Grafana
Grafana
>= 4.0.0 and < 4.6.4📦
Grafana
Grafana
>= 5.0.0 and < 5.2.3📦
Redhat