Patchwire CVEs, their patch status, and feeds to follow them

CVE-2018-15727

Fixed in a distro release EPSS 64%

Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an LDAP or OAuth user.

Published 2018-08-29 · CVE record · OSV

Products: grafana, redhat ceph_storage

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/grafana/grafana4.6.4
Gogithub.com/grafana/grafana5.2.3
Gogithub.com/grafana/grafana4.6.4+incompatible
Gogithub.com/grafana/grafana5.2.3+incompatible

Distro releases

ReleasePackageFixed in
Red Hat ceph storage 3grafana0:5.2.4-1.el7cp
Red Hat storage 3.4 na el7tendrl-gluster-integration0:1.6.3-13.el7rhgs
Red Hat storage 3.4 na el7tendrl-node-agent0:1.6.3-11.el7rhgs
Red Hat storage 3.4 wa el7grafana0:4.6.4-1.el7rhgs
Red Hat storage 3.4 wa el7tendrl-ansible0:1.6.3-10.el7rhgs
Red Hat storage 3.4 wa el7tendrl-api0:1.6.3-8.el7rhgs
Red Hat storage 3.4 wa el7tendrl-api-httpd0:1.6.3-8.el7rhgs
Red Hat storage 3.4 wa el7tendrl-grafana-plugins0:1.6.3-16.el7rhgs
Red Hat storage 3.4 wa el7tendrl-monitoring-integration0:1.6.3-16.el7rhgs
Red Hat storage 3.4 wa el7tendrl-node-agent0:1.6.3-11.el7rhgs
Red Hat storage 3.4 wa el7tendrl-ui0:1.6.3-14.el7rhgs
SUSE Enterprise Storage 4crowbar-core4.0+git.1570463621.40b11cd48-9.54.1
SUSE Enterprise Storage 4rubygem-chef10.32.2-5.12.1
SUSE Enterprise Storage 4rubygem-easy_diff1.0.0-3.3.1
SUSE Enterprise Storage 4sleshammer0.7.0-0.18.12.3
SUSE Enterprise Storage 5grafana4.6.5-3.10.1
SUSE HPE Helion OpenStack 8ardana-ansible8.0+git.1566374355.c509923-3.67.3
SUSE HPE Helion OpenStack 8ardana-glance8.0+git.1566376789.be0fe01-3.17.3
SUSE HPE Helion OpenStack 8ardana-horizon8.0+git.1565816064.5d4f73f-3.18.3
SUSE HPE Helion OpenStack 8ardana-input-model8.0+git.1566517401.98450e6-3.33.3
SUSE HPE Helion OpenStack 8ardana-manila8.0+git.1568835837.2452e7a-1.21.3
SUSE HPE Helion OpenStack 8ardana-neutron8.0+git.1568220097.74ee4b4-3.33.3
SUSE HPE Helion OpenStack 8ardana-nova8.0+git.1566902754.c58ff69-3.35.3
SUSE HPE Helion OpenStack 8ardana-octavia8.0+git.1568373448.bcaee7e-3.20.3
SUSE HPE Helion OpenStack 8ardana-tempest8.0+git.1566471887.fd2fec7-3.27.3
SUSE HPE Helion OpenStack 8galera-325.3.25-4.6.3
SUSE HPE Helion OpenStack 8grafana4.6.5-4.6.3
SUSE HPE Helion OpenStack 8mariadb10.2.25-4.14.2
SUSE HPE Helion OpenStack 8mariadb-connector-c3.1.2-3.12.3
SUSE HPE Helion OpenStack 8novnc1.0.0-3.6.3
SUSE HPE Helion OpenStack 8openstack-cinder11.2.3~dev16-3.21.4
SUSE HPE Helion OpenStack 8openstack-cinder-doc11.2.3~dev16-3.21.3
SUSE HPE Helion OpenStack 8openstack-glance15.0.3~dev3-3.12.4
SUSE HPE Helion OpenStack 8openstack-glance-doc15.0.3~dev3-3.12.3
SUSE HPE Helion OpenStack 8openstack-heat9.0.8~dev13-3.24.4
SUSE HPE Helion OpenStack 8openstack-heat-doc9.0.8~dev13-3.24.3
SUSE HPE Helion OpenStack 8openstack-horizon-plugin-neutron-vpnaas-ui1.0.1~dev3-3.6.4
SUSE HPE Helion OpenStack 8openstack-keystone12.0.4~dev4-5.27.4
SUSE HPE Helion OpenStack 8openstack-keystone-doc12.0.4~dev4-5.27.3
SUSE HPE Helion OpenStack 8openstack-monasca-installer20190923_16.32-3.9.3
SUSE HPE Helion OpenStack 8openstack-neutron11.0.9~dev51-3.24.5
SUSE HPE Helion OpenStack 8openstack-neutron-doc11.0.9~dev51-3.24.4
SUSE HPE Helion OpenStack 8openstack-neutron-gbp7.3.1~dev56-3.9.4
SUSE HPE Helion OpenStack 8openstack-neutron-lbaas11.0.4~dev6-3.15.4
SUSE HPE Helion OpenStack 8openstack-neutron-lbaas-doc11.0.4~dev6-3.15.4
SUSE HPE Helion OpenStack 8openstack-nova16.1.9~dev7-3.29.3
SUSE HPE Helion OpenStack 8openstack-nova-doc16.1.9~dev7-3.29.3
SUSE HPE Helion OpenStack 8python-amqp2.2.2-3.6.3
SUSE HPE Helion OpenStack 8python-pysaml24.0.2-5.3.3
SUSE HPE Helion OpenStack 8python-python-engineio2.0.2-3.3.3
SUSE HPE Helion OpenStack 8python-urllib31.22-5.9.3
SUSE HPE Helion OpenStack 8release-notes-hpe-helion-openstack8.20190911-3.20.3
SUSE HPE Helion OpenStack 8venv-openstack-aodh5.1.1~dev7-12.20.2
SUSE HPE Helion OpenStack 8venv-openstack-barbican5.0.2~dev3-12.21.2
SUSE HPE Helion OpenStack 8venv-openstack-ceilometer9.0.8~dev7-12.18.2
SUSE HPE Helion OpenStack 8venv-openstack-cinder11.2.3~dev16-14.21.2
SUSE HPE Helion OpenStack 8venv-openstack-designate5.0.3~dev7-12.19.2
SUSE HPE Helion OpenStack 8venv-openstack-freezer5.0.0.0~xrc2~dev2-10.16.2
SUSE HPE Helion OpenStack 8venv-openstack-glance15.0.3~dev3-12.19.2
SUSE HPE Helion OpenStack 8venv-openstack-heat9.0.8~dev13-12.21.2
SUSE HPE Helion OpenStack 8venv-openstack-horizon-hpe12.0.4~dev6-14.26.2
SUSE HPE Helion OpenStack 8venv-openstack-ironic9.1.8~dev7-12.21.2
SUSE HPE Helion OpenStack 8venv-openstack-keystone12.0.4~dev4-11.22.3
SUSE HPE Helion OpenStack 8venv-openstack-magnum5.0.2_5.0.2_5.0.2~dev31-11.20.2
SUSE HPE Helion OpenStack 8venv-openstack-manila5.1.1~dev2-12.23.2
SUSE HPE Helion OpenStack 8venv-openstack-monasca2.2.2~dev1-11.18.2
SUSE HPE Helion OpenStack 8venv-openstack-monasca-ceilometer1.5.1_1.5.1_1.5.1~dev3-8.16.2
SUSE HPE Helion OpenStack 8venv-openstack-murano4.0.2~dev2-12.16.2
SUSE HPE Helion OpenStack 8venv-openstack-neutron11.0.9~dev51-13.24.3
SUSE HPE Helion OpenStack 8venv-openstack-nova16.1.9~dev7-11.22.3
SUSE HPE Helion OpenStack 8venv-openstack-octavia1.0.6~dev2-12.21.2
SUSE HPE Helion OpenStack 8venv-openstack-sahara7.0.4~dev1-11.20.2
SUSE HPE Helion OpenStack 8venv-openstack-swift2.15.2-11.13.3
SUSE HPE Helion OpenStack 8venv-openstack-trove8.0.1~dev13-11.20.2
SUSE OpenStack Cloud 7crowbar-core4.0+git.1570463621.40b11cd48-9.54.1
SUSE OpenStack Cloud 7crowbar-openstack4.0+git.1569429513.e7016b2b6-9.59.1
SUSE OpenStack Cloud 7grafana4.6.5-1.11.2
SUSE OpenStack Cloud 7novnc1.0.0-12.1
SUSE OpenStack Cloud 7openstack-keystone10.0.3~dev9-7.18.2
SUSE OpenStack Cloud 7openstack-keystone-doc10.0.3~dev9-7.18.2
SUSE OpenStack Cloud 7openstack-neutron9.4.2~dev21-7.32.1
SUSE OpenStack Cloud 7openstack-neutron-doc9.4.2~dev21-7.32.1
SUSE OpenStack Cloud 7openstack-neutron-lbaas9.2.2~dev11-4.18.3
SUSE OpenStack Cloud 7openstack-neutron-lbaas-doc9.2.2~dev11-4.18.3
SUSE OpenStack Cloud 7openstack-nova14.0.11~dev13-4.34.3
SUSE OpenStack Cloud 7openstack-nova-doc14.0.11~dev13-4.34.2
SUSE OpenStack Cloud 7openstack-tempest12.2.1~a0~dev177-4.6.3
SUSE OpenStack Cloud 7python-pysaml24.0.2-3.11.3
SUSE OpenStack Cloud 7python-urllib31.16-3.9.2
SUSE OpenStack Cloud 7rubygem-chef10.32.2-5.12.1
SUSE OpenStack Cloud 7rubygem-easy_diff1.0.0-3.3.1
SUSE OpenStack Cloud 7sleshammer0.7.0-0.18.12.3
SUSE OpenStack Cloud 8ardana-ansible8.0+git.1566374355.c509923-3.67.3
SUSE OpenStack Cloud 8ardana-glance8.0+git.1566376789.be0fe01-3.17.3
SUSE OpenStack Cloud 8ardana-horizon8.0+git.1565816064.5d4f73f-3.18.3
SUSE OpenStack Cloud 8ardana-input-model8.0+git.1566517401.98450e6-3.33.3
SUSE OpenStack Cloud 8ardana-manila8.0+git.1568835837.2452e7a-1.21.3
SUSE OpenStack Cloud 8ardana-neutron8.0+git.1568220097.74ee4b4-3.33.3
SUSE OpenStack Cloud 8ardana-nova8.0+git.1566902754.c58ff69-3.35.3
SUSE OpenStack Cloud 8ardana-octavia8.0+git.1568373448.bcaee7e-3.20.3
SUSE OpenStack Cloud 8ardana-tempest8.0+git.1566471887.fd2fec7-3.27.3
SUSE OpenStack Cloud 8galera-325.3.25-4.6.3
SUSE OpenStack Cloud 8grafana4.6.5-4.6.3
SUSE OpenStack Cloud 8mariadb10.2.25-4.14.2
SUSE OpenStack Cloud 8mariadb-connector-c3.1.2-3.12.3
SUSE OpenStack Cloud 8novnc1.0.0-3.6.3
SUSE OpenStack Cloud 8openstack-cinder11.2.3~dev16-3.21.4
SUSE OpenStack Cloud 8openstack-cinder-doc11.2.3~dev16-3.21.3
SUSE OpenStack Cloud 8openstack-glance15.0.3~dev3-3.12.4
SUSE OpenStack Cloud 8openstack-glance-doc15.0.3~dev3-3.12.3
SUSE OpenStack Cloud 8openstack-heat9.0.8~dev13-3.24.4
SUSE OpenStack Cloud 8openstack-heat-doc9.0.8~dev13-3.24.3
SUSE OpenStack Cloud 8openstack-horizon-plugin-neutron-vpnaas-ui1.0.1~dev3-3.6.4
SUSE OpenStack Cloud 8openstack-keystone12.0.4~dev4-5.27.4
SUSE OpenStack Cloud 8openstack-keystone-doc12.0.4~dev4-5.27.3
SUSE OpenStack Cloud 8openstack-monasca-installer20190923_16.32-3.9.3
SUSE OpenStack Cloud 8openstack-neutron11.0.9~dev51-3.24.5
SUSE OpenStack Cloud 8openstack-neutron-doc11.0.9~dev51-3.24.4
SUSE OpenStack Cloud 8openstack-neutron-gbp7.3.1~dev56-3.9.4
SUSE OpenStack Cloud 8openstack-neutron-lbaas11.0.4~dev6-3.15.4
SUSE OpenStack Cloud 8openstack-neutron-lbaas-doc11.0.4~dev6-3.15.4
SUSE OpenStack Cloud 8openstack-nova16.1.9~dev7-3.29.3
SUSE OpenStack Cloud 8openstack-nova-doc16.1.9~dev7-3.29.3
SUSE OpenStack Cloud 8python-amqp2.2.2-3.6.3
SUSE OpenStack Cloud 8python-ovs2.7.2-3.6.1
SUSE OpenStack Cloud 8python-pysaml24.0.2-5.3.3
SUSE OpenStack Cloud 8python-python-engineio2.0.2-3.3.3
SUSE OpenStack Cloud 8python-urllib31.22-5.9.3
SUSE OpenStack Cloud 8release-notes-suse-openstack-cloud8.20190911-3.20.3
SUSE OpenStack Cloud 8venv-openstack-aodh5.1.1~dev7-12.20.2
SUSE OpenStack Cloud 8venv-openstack-barbican5.0.2~dev3-12.21.2
SUSE OpenStack Cloud 8venv-openstack-ceilometer9.0.8~dev7-12.18.2
SUSE OpenStack Cloud 8venv-openstack-cinder11.2.3~dev16-14.21.2
SUSE OpenStack Cloud 8venv-openstack-designate5.0.3~dev7-12.19.2
SUSE OpenStack Cloud 8venv-openstack-freezer5.0.0.0~xrc2~dev2-10.16.2
SUSE OpenStack Cloud 8venv-openstack-glance15.0.3~dev3-12.19.2
SUSE OpenStack Cloud 8venv-openstack-heat9.0.8~dev13-12.21.2
SUSE OpenStack Cloud 8venv-openstack-horizon12.0.4~dev6-14.26.2
SUSE OpenStack Cloud 8venv-openstack-ironic9.1.8~dev7-12.21.2
SUSE OpenStack Cloud 8venv-openstack-keystone12.0.4~dev4-11.22.3
SUSE OpenStack Cloud 8venv-openstack-magnum5.0.2_5.0.2_5.0.2~dev31-11.20.2
SUSE OpenStack Cloud 8venv-openstack-manila5.1.1~dev2-12.23.2
SUSE OpenStack Cloud 8venv-openstack-monasca2.2.2~dev1-11.18.2
SUSE OpenStack Cloud 8venv-openstack-monasca-ceilometer1.5.1_1.5.1_1.5.1~dev3-8.16.2
SUSE OpenStack Cloud 8venv-openstack-murano4.0.2~dev2-12.16.2
SUSE OpenStack Cloud 8venv-openstack-neutron11.0.9~dev51-13.24.3
SUSE OpenStack Cloud 8venv-openstack-nova16.1.9~dev7-11.22.3
SUSE OpenStack Cloud 8venv-openstack-octavia1.0.6~dev2-12.21.2
SUSE OpenStack Cloud 8venv-openstack-sahara7.0.4~dev1-11.20.2
SUSE OpenStack Cloud 8venv-openstack-swift2.15.2-11.13.3
SUSE OpenStack Cloud 8venv-openstack-trove8.0.1~dev13-11.20.2
SUSE OpenStack Cloud Crowbar 8crowbar-core5.0+git.1569597589.1f025c557-3.32.2
SUSE OpenStack Cloud Crowbar 8crowbar-ha5.0+git.1567673535.607aada-3.26.2
SUSE OpenStack Cloud Crowbar 8crowbar-openstack5.0+git.1570141351.058c8bd44-4.31.2
SUSE OpenStack Cloud Crowbar 8crowbar-ui1.2.0+git.1568396400.0344a727-3.12.3
SUSE OpenStack Cloud Crowbar 8galera-325.3.25-4.6.3
SUSE OpenStack Cloud Crowbar 8grafana4.6.5-4.6.3
SUSE OpenStack Cloud Crowbar 8mariadb10.2.25-4.14.2
SUSE OpenStack Cloud Crowbar 8mariadb-connector-c3.1.2-3.12.3
SUSE OpenStack Cloud Crowbar 8novnc1.0.0-3.6.3
SUSE OpenStack Cloud Crowbar 8openstack-cinder11.2.3~dev16-3.21.4
SUSE OpenStack Cloud Crowbar 8openstack-cinder-doc11.2.3~dev16-3.21.3
SUSE OpenStack Cloud Crowbar 8openstack-glance15.0.3~dev3-3.12.4
SUSE OpenStack Cloud Crowbar 8openstack-glance-doc15.0.3~dev3-3.12.3
SUSE OpenStack Cloud Crowbar 8openstack-heat9.0.8~dev13-3.24.4
SUSE OpenStack Cloud Crowbar 8openstack-heat-doc9.0.8~dev13-3.24.3
SUSE OpenStack Cloud Crowbar 8openstack-horizon-plugin-neutron-vpnaas-ui1.0.1~dev3-3.6.4
SUSE OpenStack Cloud Crowbar 8openstack-keystone12.0.4~dev4-5.27.4
SUSE OpenStack Cloud Crowbar 8openstack-keystone-doc12.0.4~dev4-5.27.3
SUSE OpenStack Cloud Crowbar 8openstack-monasca-installer20190923_16.32-3.9.3
SUSE OpenStack Cloud Crowbar 8openstack-neutron11.0.9~dev51-3.24.5
SUSE OpenStack Cloud Crowbar 8openstack-neutron-doc11.0.9~dev51-3.24.4
SUSE OpenStack Cloud Crowbar 8openstack-neutron-gbp7.3.1~dev56-3.9.4
SUSE OpenStack Cloud Crowbar 8openstack-neutron-lbaas11.0.4~dev6-3.15.4
SUSE OpenStack Cloud Crowbar 8openstack-neutron-lbaas-doc11.0.4~dev6-3.15.4
SUSE OpenStack Cloud Crowbar 8openstack-nova16.1.9~dev7-3.29.3
SUSE OpenStack Cloud Crowbar 8openstack-nova-doc16.1.9~dev7-3.29.3
SUSE OpenStack Cloud Crowbar 8python-amqp2.2.2-3.6.3
SUSE OpenStack Cloud Crowbar 8python-ovs2.7.2-3.6.1
SUSE OpenStack Cloud Crowbar 8python-pysaml24.0.2-5.3.3
SUSE OpenStack Cloud Crowbar 8python-urllib31.22-5.9.3
SUSE OpenStack Cloud Crowbar 8release-notes-suse-openstack-cloud8.20190911-3.20.3
SUSE OpenStack Cloud Crowbar 8rubygem-easy_diff1.0.0-3.4.2
Ubuntu 16.04 LTSgrafanano fix