auxiliary/admin/http/grafana_auth_bypass

functional

Grafana 2.0 through 5.2.2 authentication bypass for LDAP and OAuth

view exploit source metasploittype auxiliarypublished 2019-08-14catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2018-15727US	critical9.8	64.3% (99th)	Exploit	2018-08-29
Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid "remember me" cookie knowing only a username of an…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.