漏洞描述
Prometheus监控服务是开源项目全托管式监控服务。提供开箱即用的监控大盘与告警体系，兼容开源生态各种应用组件监控，零部署运维负担，有效提升运维效率。攻击者可利用该漏洞获取站点敏感信息。
Prometheus 未授权访问
PoC代码
暂无相关漏洞推荐
- POC CVE-2021-29622: Prometheus - Open Redirect
- POC CVE-2021-29622: Prometheus v2.23.0 to v2.26.0, and v2.27.0 Open Redirect
- POC prometheus-metrics: Prometheus Metrics - Detect
- POC prometheus-promtail: Prometheus Promtail - Exposure
- POC prometheus-log: Exposed Prometheus
- POC prometheus-unauth: Prometheus Monitoring System - Unauthenticated
- POC thanos-prometheus-exposure: Thanos Prometheus Setup - Exposure
- Prometheus集群运维监控系统Agent端远程命令执行漏洞
- Prometheus Time Series Collection and Processing Server信息泄露