CVE-2023-6001 | BDVDB-2026-216221 Detail
YugabyteDBYugabyteDB Anywhere
Description#
Prometheus metrics are available without authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere environment.
Impact#
CAPEC-115 Authentication Bypass
Weaknesses#
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.