CVE-2019-15043: High severity grafana labs grafana oss and enterprise vulnerability
In Grafana 2.x through 6.x before 6.3.4, parts of the HTTP API allow unauthenticated use. This makes it possible to run a denial of service attack against the server running Grafana.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2019-15043?
CVE-2019-15043 is a vulnerability in Grafana 2.x through 6.x before 6.3.4 that allows unauthenticated use of parts of the HTTP API, leading to a possible denial of service attack.
How severe is CVE-2019-15043?
CVE-2019-15043 has a severity rating of 7.5 (high).
What software versions are affected by CVE-2019-15043?
Grafana versions 2.x through 6.x before 6.3.4 are affected.
How can I fix CVE-2019-15043?
To fix CVE-2019-15043, you should upgrade Grafana to version 6.3.4 or later.
Where can I find more information about CVE-2019-15043?
You can find more information about CVE-2019-15043 at the following references: [Link 1](http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00060.html), [Link 2](http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00083.html), [Link 3](http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00009.html)