medium5.3
CVE-2023-6001
Prometheus metrics are available without authentication.
Impact
Prometheus metrics are available without authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere environment.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yugabyte | Yugabytedb | from 2.0.0 before 2.18.4.0 |