Description
Prometheus is a monitoring system and time series database
Acunetix determined that it was possible to access Prometheus interface without authentication.
Remediation
Restrict access to Prometheus
References
Related Vulnerabilities
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5730)
WordPress 4.5.x Multiple Vulnerabilities (4.5 - 4.5.29)
WordPress Plugin WP Mobile Edition Arbitrary File Disclosure (2.2.7)
PHP X Prober publicly accessible
Plone CMS Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-21336)