CVE-2022-46146GO-2022-1130GHSA-7RG2-CXVP-9P7P
Prometheus Exporter Toolkit vulnerable to basic authentication bypass
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 0.7.2, 0.8.2
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaround, but attacker must have access to the hashed password to use this functionality.
Timeline
- CVE published
- Record last updated
Affected versions
- prometheus exporter-toolkit
fixed in 0.7.2; From 0.8.0 · fixed in 0.8.2
- github.com/prometheus/exporter-toolkitGo
fixed in 0.7.2; From 0.8.0 · fixed in 0.8.2
- github.com/prometheus/exporter-toolkitGo
fixed in 0.7.2
- github.com/prometheus/exporter-toolkitGo
From 0.8.0 · fixed in 0.8.2