Sensitive Data: Grafana Default Login¶

Identifier: grafana_default_login

Scanner(s) Support¶

Description¶

Grafana default admin login credentials were detected.

Reference:

• https://grafana.com/docs/grafana/latest/administration/configuration/#disable_brute_force_login_protection
• https://stackoverflow.com/questions/54039604/what-is-the-default-username-and-password-for-grafana-login-page
• https://github.com/grafana/grafana/issues/14755

Configuration¶

Example¶

Example configuration:

---
security_tests:
  grafana_default_login:
    assets_allowed:
    - REST
    - GRAPHQL
    - WEBAPP
    skip: false

Reference¶

assets_allowed¶

Type : List[AssetType]*

List of assets that this check will cover.

skip¶

Type : boolean

Skip the test if true.