[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f6Y3jK8BOaCXIpJ4QvhAaW095Kh7-0LUbHaxMRtHBHSY":3,"g5a-risk:CVE-2022-46146":147},{"success":4,"data":5,"meta":144},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":48,"references":49,"referencesCount":85,"weaknesses":86,"weaknessesCount":101,"isActivelyExploited":102,"cisaInfo":26,"otxData":26,"relatedBlogPosts":103,"seoMetadata":104,"configurations":129,"relatedVendorCves":142,"notableEvents":143},"CVE-2022-46146","What is CVE-2022-46146?","Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file and users' bcrypted passwords, they can bypass security by poisoning the built-in authentication cache. Versions 0.7.2 and 0.8.2 contain a fix for the issue. There is no workaround, but attacker must have access to the hashed password to use this functionality.","Prometheus Exporter Toolkit is a utility package to build exporters. Prior to versions 0.7.2 and 0.8.2, if someone has access to a Prometheus web.yml file an...","2022-11-29T14:15:13.283","2024-01-12T12:15:45.11",8.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":26,"CVSSMetricV40":26},[16,29],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,2.8,5.9,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":37,"ImpactScore":38},"security-advisories@github.com","Secondary",{"Version":20,"VectorString":33,"AttackVector":34,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":23,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","LOCAL",6.2,"MEDIUM",2.5,3.6,0.01262,[39,39,39,39,39,39,39],"High",[43],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"prometheus","exporter_toolkit","*","cpe:2.3:a:prometheus:exporter_toolkit:*:*:*:*:*:*:*:*",1,[50,57,61,64,68,71,75,78,81],{"url":51,"source":52,"tags":53},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2022\u002F11\u002F29\u002F1","Openwall",[54,55,56],"Exploit","Mailing List","Third Party Advisory",{"url":58,"source":52,"tags":59},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2022\u002F11\u002F29\u002F2",[54,55,60,56],"Patch",{"url":62,"source":52,"tags":63},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2022\u002F11\u002F29\u002F4",[54,55,60,56],{"url":65,"source":66,"tags":67},"https:\u002F\u002Fgithub.com\u002Fprometheus\u002Fexporter-toolkit\u002Fcommit\u002F5b1eab34484ddd353986bce736cd119d863e4ff5","GitHub",[60,56],{"url":69,"source":66,"tags":70},"https:\u002F\u002Fgithub.com\u002Fprometheus\u002Fexporter-toolkit\u002Fsecurity\u002Fadvisories\u002FGHSA-7rg2-cxvp-9p7p",[56],{"url":72,"source":73,"tags":74},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FJRSHISR64L6QGSMDFZDNPHHIXSCAKK26\u002F","Fedoraproject",[],{"url":76,"source":73,"tags":77},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FUH24VXIB25OGHF4VGY4PLZMTGTI3BHCA\u002F",[],{"url":79,"source":73,"tags":80},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FULVDTAI76VATRAHTKCE2SUJ4NC3PQZ6Y\u002F",[],{"url":82,"source":83,"tags":84},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F202401-15","Gentoo",[],9,[87,95],{"id":88,"name":89,"description":90,"extendedDescription":91,"status":92,"abstraction":93,"structure":94},"CWE-303","Incorrect Implementation of Authentication Algorithm","The requirements for the product dictate the use of an established authentication algorithm, but the implementation of the algorithm is incorrect.","This incorrect implementation may allow authentication to be bypassed.","Draft","Base","Simple",{"id":96,"name":97,"description":98,"extendedDescription":99,"status":92,"abstraction":100,"structure":94},"CWE-287","Improper Authentication","When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.","","Class",2,false,[],{"title":105,"metaDescription":106,"keywords":107,"canonicalUrl":108,"structuredData":109},"What is CVE-2022-46146? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-46146, a high severity cyber security vulnerability from 2022. Prometheus Exporter Toolkit is a utility package to build e...","CVE-2022-46146, CVE-2022-46146 vulnerability, CVE-2022-46146 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, prometheus security, exporter_toolkit vulnerability","\u002Fwhat-is\u002Fcve-2022-46146",{"@context":110,"@type":111,"headline":105,"description":106,"datePublished":10,"dateModified":11,"author":112,"publisher":116,"about":120,"mainEntityOfPage":124,"articleSection":127,"keywords":128},"https:\u002F\u002Fschema.org","TechArticle",{"@type":113,"name":114,"url":115},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":113,"name":114,"url":115,"logo":117},{"@type":118,"url":119},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":121,"name":6,"description":122,"additionalType":123},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":125,"@id":126},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-46146","Cybersecurity","CVE-2022-46146, CVE-2022-46146 vulnerability, CVE-2022-46146 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[130],{"Operator":26,"Negate":26,"Nodes":131},[132],{"Operator":133,"Negate":26,"CPEMatch":134},"OR",[135,138],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":136,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":137,"VersionEndIncluding":26},"715C0429-EE84-443F-B5F2-D2D3F6CE74AD","0.7.2",{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":139,"VersionStartExcluding":26,"VersionStartIncluding":140,"VersionEndExcluding":141,"VersionEndIncluding":26},"A2B307E0-6990-48D5-8AE1-7F4E95EBF8A0","0.8.0","0.8.2",[],[],{"lastModified":11,"cacheTime":145,"version":146},1792265188164,"2.0",{"score":148,"band":149,"action":150,"scoredAt":151},52,"Medium","Plan remediation","2026-10-16T06:56:23.256037+00:00"]