Описание
blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured.
Ссылки
- Product
- Issue Tracking
- Issue Tracking
- Issue Tracking
- Product
- Issue Tracking
- Issue Tracking
- Issue Tracking
- Product
Уязвимые конфигурации
EPSS
7.5 High
CVSS3
Дефекты
Связанные уязвимости
blackbox_exporter v0.23.0 was discovered to contain an access control issue in its probe interface. This vulnerability allows attackers to detect intranet ports and services, as well as download resources. NOTE: this is disputed by third parties because authentication can be configured.
blackbox_exporter v0.23.0 was discovered to contain an access control ...
Withdrawn Advisory: Access control issues in blackbox_exporter
ALT-PU-2023-4589: package `prometheus-blackbox_exporter` update to version 0.24.0-alt1
EPSS
7.5 High
CVSS3