Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Prometheus Subscribe
Filtered by product Exporter Toolkit
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-46146 1 Prometheus 1 Exporter Toolkit 2023-02-01 N/A 8.8 HIGH
Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaround, but attacker must have access to the hashed password to use this functionality.