mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-06 02:46:33 +00:00
26 lines
829 B
Markdown
26 lines
829 B
Markdown
|
# Grafana存在默认口令漏洞
|
|||
|
|
|
|||
|
|
# 一、漏洞描述
|
|||
|
|
Grafana是一个开源的可视化和分析平台，一个通用的可视化工具。‘通用’意味着Grafana不仅仅适用于展示Prometheus下的监控数据，也同样适用于一些其他的数据可视化需求。Grafana存在默认口令漏洞
|
|||
|
|
|
|||
|
|
# 二、影响版本
|
|||
|
|
Grafana
|
|||
|
|
|
|||
|
|
# 三、资产测绘
|
|||
|
|
```plain
|
|||
|
|
app="Grafana"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
# 三、漏洞复现
|
|||
|
|
```plain
|
|||
|
|
admin/admin
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
> 更新: 2024-10-22 09:41:43
|
|||
|
|
> 原文: <https://www.yuque.com/xiaokp7/ocvun2/frrsz6mukggncnm8>
|