Description
Prometheus is a monitoring system and time series database
Acunetix determined that it was possible to access without authentication a web application's metrics exposed for Prometheus.
Remediation
Restrict access to metrics
References
Related Vulnerabilities
SSL Certificate Is About To Expire
WordPress Plugin Cherry Team Members Information Disclosure (1.4.1)
phpMyFAQ Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-6048)
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-4898)
WordPress Plugin Store Locator Plus for WordPress Multiple Vulnerabilities (3.0.1)