Description

Prometheus is a monitoring system and time series database

Acunetix determined that it was possible to access Prometheus interface without authentication.

Remediation

Restrict access to Prometheus

References

Security Model

Related Vulnerabilities

ASP.NET WCF metadata enabled for behavior

WordPress Plugin RB Agency Local File Disclosure (2.4.7)

WordPress Plugin Gallery-Flagallery Photo Portfolio Information Disclosure (4.24)

Pyramid DebugToolbar enabled

Unrestricted access to ImageResizer Diagnotics plugin

Severity

Low

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Information Disclosure CWE-200