[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZmbrEe7M9DWJtyLy7kaX5Z4TuCMX2qKOz_B1L_w3XUs":3,"g5a-risk:CVE-2018-15727":150},{"success":4,"data":5,"meta":148},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":15,"epssTimeSeries":40,"severity":42,"affectedProducts":43,"affectedProductsCount":52,"references":53,"referencesCount":73,"weaknesses":74,"weaknessesCount":83,"isActivelyExploited":84,"cisaInfo":15,"otxData":15,"relatedBlogPosts":85,"seoMetadata":86,"configurations":111,"relatedVendorCves":139,"notableEvents":140},"CVE-2018-15727","What is CVE-2018-15727?","Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid \"remember me\" cookie knowing only a username of an LDAP or OAuth user.","Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid \"remember me\" cookie knowin...","2018-08-29T15:29:00.24","2019-03-05T17:26:49.527",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":30,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,[31],{"Source":18,"Type":19,"CVSSData":32,"BaseSeverity":26,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":33,"VectorString":34,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":35,"IntegrityImpact":35,"AvailabilityImpact":35,"BaseScore":36,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.64284,[39,39,41,39,39,39,39],0.6346,"Critical",[44,48],{"vendor":45,"product":45,"version":46,"criteria":47,"vulnerable":4},"grafana","*","cpe:2.3:a:grafana:grafana:*:*:*:*:*:*:*:*",{"vendor":49,"product":50,"version":21,"criteria":51,"vulnerable":4},"redhat","ceph_storage","cpe:2.3:a:redhat:ceph_storage:3.0:*:*:*:*:*:*:*",2,[54,60,64,67],{"url":55,"source":56,"tags":57},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F105184","Securityfocus",[58,59],"Third Party Advisory","VDB Entry",{"url":61,"source":62,"tags":63},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2018:3829","Red Hat",[58],{"url":65,"source":62,"tags":66},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:0019",[58],{"url":68,"source":69,"tags":70},"https:\u002F\u002Fgrafana.com\u002Fblog\u002F2018\u002F08\u002F29\u002Fgrafana-5.2.3-and-4.6.4-released-with-important-security-fix\u002F","Grafana",[71,72],"Patch","Vendor Advisory",4,[75],{"id":76,"name":77,"description":78,"extendedDescription":79,"status":80,"abstraction":81,"structure":82},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Draft","Class","Simple",1,false,[],{"title":87,"metaDescription":88,"keywords":89,"canonicalUrl":90,"structuredData":91},"What is CVE-2018-15727? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-15727, a critical severity cyber security vulnerability from 2018. High exploit probability (64.3%). Grafana 2.x, 3.x, and...","CVE-2018-15727, CVE-2018-15727 vulnerability, CVE-2018-15727 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, grafana security, redhat security, grafana vulnerability, ceph_storage vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2018-15727",{"@context":92,"@type":93,"headline":87,"description":88,"datePublished":10,"dateModified":11,"author":94,"publisher":98,"about":102,"mainEntityOfPage":106,"articleSection":109,"keywords":110},"https:\u002F\u002Fschema.org","TechArticle",{"@type":95,"name":96,"url":97},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":95,"name":96,"url":97,"logo":99},{"@type":100,"url":101},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":103,"name":6,"description":104,"additionalType":105},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":107,"@id":108},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-15727","Cybersecurity","CVE-2018-15727, CVE-2018-15727 vulnerability, CVE-2018-15727 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[112,133],{"Operator":15,"Negate":15,"Nodes":113},[114],{"Operator":115,"Negate":15,"CPEMatch":116},"OR",[117,121,125,129],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":118,"VersionStartExcluding":15,"VersionStartIncluding":119,"VersionEndExcluding":15,"VersionEndIncluding":120},"9C71899D-7F83-4225-9909-A92946D40993","2.0.0","2.1.2",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":122,"VersionStartExcluding":15,"VersionStartIncluding":123,"VersionEndExcluding":15,"VersionEndIncluding":124},"77EFAAB9-3793-4EB2-93CD-A176BE99114F","3.0.0","3.1.1",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":126,"VersionStartExcluding":15,"VersionStartIncluding":127,"VersionEndExcluding":128,"VersionEndIncluding":15},"0B6D532B-B26E-40A0-BB6B-F4212C81C486","4.0.0","4.6.4",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":130,"VersionStartExcluding":15,"VersionStartIncluding":131,"VersionEndExcluding":132,"VersionEndIncluding":15},"94C5564A-BC37-4906-AF7B-4DB4E335C6DB","5.0.0","5.2.3",{"Operator":15,"Negate":15,"Nodes":134},[135],{"Operator":115,"Negate":15,"CPEMatch":136},[137],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":138,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"516F4E8E-ED2F-4282-9DAB-D8B378F61258",[],[141],{"id":142,"eventType":143,"eventTime":144,"details":145,"label":146,"color":147},"73003357-d0d9-41f7-bc8e-4fd3a44186b1","LOW_EPSS_DELTA","2026-06-16T04:06:15.510262+00:00","Daily EPSS score decreased by 0.153 on 2023-12-30","EPSS Score Decreased","green",{"lastModified":11,"cacheTime":149,"version":33},1792261697973,{"score":151,"band":152,"action":153,"scoredAt":154},62,"Medium","Plan remediation","2026-10-16T06:44:46.415974+00:00"]