Debian Golang-Github-Prometheus-Exporter-Toolkit vulnerabilities

1 known vulnerability affecting debian/golang-github-prometheus-exporter-toolkit.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2022-46146MEDIUMCVSS 6.2fixed in golang-github-prometheus-exporter-toolkit 0.8.2-1 (bookworm)2022

CVE-2022-46146 [MEDIUM] CVE-2022-46146: golang-github-prometheus-exporter-toolkit - Prometheus Exporter Toolkit is a utility package to build exporters. Prior to ve... Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaro