Skip to content
OpenAdvisories

Package · Go

github.com/prometheus/exporter-toolkit

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2022-46146

    Prometheus Exporter Toolkit vulnerable to basic authentication bypass

    Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. …

    prometheus exporter-toolkit prometheus prometheus Debian Ubuntu Alpine Go