CVE-2020-12459

In certain Red Hat packages for Grafana 6.x through 6.3.6, the configuration files /etc/grafana/grafana.ini and /etc/grafana/ldap.toml (which contain a secret_key and a bind_password) are world readable.

Date published : 2020-04-29

https://access.redhat.com/security/cve/CVE-2020-12459

https://bugzilla.redhat.com/show_bug.cgi?id=1829724