AZL-41992 CVE-2022-46146 affecting package prometheus-process-exporter for versions less than 0.8.2-1

🗓️ 29 Nov 2022 14:15:13Reported by GoogleType

osv🔗 osv.dev👁 5 Views

CVE-2022-46146 affects prometheus-process-exporter; auth cache poisoning possible before 0.7.2 and 0.8.2 using web.yml and hashed passwords; fixed.

Reporter	Title	Published	Views	Family All 139
FreeBSD	prometheus2 -- basic authentication bypass	28 Nov 202200:00	–	freebsd
FreeBSD	node_exporter -- bypass security with cache poisoning	28 Nov 202100:00	–	freebsd
ATTACKERKB	CVE-2022-46146	29 Nov 202214:15	–	attackerkb
AlpineLinux	CVE-2022-46146	29 Nov 202200:00	–	alpinelinux
Tenable Nessus	Azure Linux 3.0 Security Update: prometheus-process-exporter (CVE-2022-46146)	22 Jan 202600:00	–	nessus
Tenable Nessus	Fedora 37 : golang-github-prometheus-exporter-toolkit / etc (2023-1b25579262)	21 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 38 : golang-github-prometheus-exporter-toolkit / etc (2023-c1318fb7f8)	21 Sep 202300:00	–	nessus
Tenable Nessus	Fedora 39 : golang-github-prometheus-exporter-toolkit / etc (2023-cf176d02d8)	7 Nov 202300:00	–	nessus
Tenable Nessus	FreeBSD : prometheus2 -- basic authentication bypass (791a09c5-a086-11ed-954d-b42e991fc52e)	30 Jan 202300:00	–	nessus
Tenable Nessus	FreeBSD : node_exporter -- bypass security with cache poisoning (d835c54f-a4bd-11ed-b6af-b42e991fc52e)	4 Feb 202300:00	–	nessus