Unrated severityNVD Advisory· Published Mar 21, 2022· Updated Aug 3, 2024
CVE-2022-26148
CVE-2022-26148
Description
An issue was discovered in Grafana through 7.3.4, when integrated with Zabbix. The Zabbix password can be found in the api_jsonrpc.php HTML source code. When the user logs in and allows the user to register, one can right click to view the source code and use Ctrl-F to search for password in api_jsonrpc.php to discover the Zabbix account password and URL address.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3Patches
Vulnerability mechanics
References
2- 2k8.org/post-319.htmlmitrex_refsource_MISC
- security.netapp.com/advisory/ntap-20220425-0005/mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.