The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. Grafana 2.x, 3.x, and 4.x before 4.6.4 and 5.x before 5.2.3 allows authentication bypass because an attacker can generate a valid remember me cookie knowing only a username of an LDAP or OAuth user. (CVE-2018-15727) Note that Nessus relies on the presence of the package as reported by the vendor. File data…Read More