Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Unrestricted access to Prometheus - Vulnerability Database

Unrestricted access to Prometheus

Description

Prometheus is a monitoring system and time series database

Invicti determined that it was possible to access Prometheus interface without authentication.

Remediation

Restrict access to Prometheus

References

Security Model

Related Vulnerabilities

Trace.axd Detected High
Common tags: Configuration Information Disclosure
Apache stronghold-status enabled Low
Common tags: Configuration Information Disclosure
JBoss Server MBean High
Common tags: Configuration Information Disclosure
JBoss JMX Console Unrestricted Access High
Common tags: Configuration Information Disclosure
JBoss Web Console JMX Invoker High
Common tags: Configuration Information Disclosure

Severity

Low

Classification

CWE-200
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration
Information Disclosure