alertmanager-unauth: Alertmanager 未授权访问

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://comate.baidu.com/zh/page/hnh002brg2j
• https://ask.csdn.net/questions/9116642
• https://www.cnblogs.com/haiyoyo/p/18563403
• https://blog.csdn.net/weixin_33670786/article/details/159704374
• https://s4e.io/tools/alert-manager-unauthenticated-access-scanner
• https://cloud.tencent.com/developer/ask/sof/107620337
• https://prometheus.io/docs/alerting/latest/https/
• https://nvd.nist.gov/vuln/detail/CVE-2023-40577

Related Vulnerabilities

• PoCseaweedfs-unauth: SeaweedFS Filer - Unauthenticated Access
• PoCmarimo-unauth: motionEye Partial - Authentication Bypass
• PoClaravel-nova-unauth: Laravel Nova - Unauthenticated Admin Panel Access
• PoClaravel-pulse-unauth: Laravel Pulse - Unauthenticated Dashboard Access
• PoCpuppetdb-dashboard-unauth: PuppetDB Dashboard - Unauthenticated Access
• PoCargo-workflows-unauth: Argo Workflows - Unauthenticated Dashboard
• PoCnode-red-unauth: Node-RED - Unauthenticated Access
• PoCchroma-db-unauth: Chroma DB - Information Disclosure
• PoCjboss-jmx-console-unauth: JBoss JMX Console - Unauthenticated Access
• druid-monitor-unauth: Druid Monitor Unauth
• etcd-unauth: ETCD Unauth
• springboot-actuator-unauth: Springboot Actuator Unauth
• docker-registry-api-unauth: docker registry api 未经批准