Lucene search
K

4 matches found

SUSE CVE
SUSE CVE
added 2023/02/15 3:22 a.m.2 views

SUSE CVE-2022-46146

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix...

8.8CVSS9.3AI score0.01166EPSS
Exploits1References35
ATTACKERKB
ATTACKERKB
added 2022/11/29 2:15 p.m.2 views

CVE-2022-46146

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix...

8.8CVSS7.2AI score0.01166EPSS
Exploits1References13Affected Software1
OSV
OSV
added 2022/11/29 2:15 p.m.8 views

AZL-41992 CVE-2022-46146 affecting package prometheus-process-exporter for versions less than 0.8.2-1

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix...

8.8CVSS7.2AI score0.01166EPSS
Exploits1References1
OSV
OSV
added 2022/11/29 2:15 p.m.2 views

UBUNTU-CVE-2022-46146

Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix...

8.8CVSS7.3AI score0.01166EPSS
Exploits1References9
Rows per page
Query Builder