Prometheus Exporter Toolkit vulnerable to basic authentication bypass

🗓️ 11 Sep 2024 07:00:00Reported by MicrosoftType

Prometheus Exporter Toolkit has a vulnerability that allows bypassing basic authentication.

Reporter	Title	Published	Views	Family All 137
FreeBSD	prometheus2 -- basic authentication bypass	28 Nov 202200:00	–	freebsd
FreeBSD	node_exporter -- bypass security with cache poisoning	28 Nov 202100:00	–	freebsd
ATTACKERKB	CVE-2022-46146	29 Nov 202214:15	–	attackerkb
AlpineLinux	CVE-2022-46146	29 Nov 202200:00	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: prometheus-process-exporter (CVE-2022-46146)	22 Jan 202600:00	–	nessus
Tenable Nessus	Fedora 37 : golang-github-prometheus-exporter-toolkit / etc (2023-1b25579262)	21 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 38 : golang-github-prometheus-exporter-toolkit / etc (2023-c1318fb7f8)	21 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 39 : golang-github-prometheus-exporter-toolkit / etc (2023-cf176d02d8)	7 Nov 202300:00	–	nessus
Tenable Nessus	FreeBSD : prometheus2 -- basic authentication bypass (791a09c5-a086-11ed-954d-b42e991fc52e)	30 Jan 202300:00	–	nessus
Tenable Nessus	FreeBSD : node_exporter -- bypass security with cache poisoning (d835c54f-a4bd-11ed-b6af-b42e991fc52e)	4 Feb 202300:00	–	nessus