CVE-2022-46146

CVE-2022-46146 is a high-severity authentication bypass vulnerability affecting Prometheus Exporter Toolkit versions prior to 0.7.2 and 0.8.2. An attacker with access to the web.yml file and a user's bcrypted password can poison the built-in authentication cache to gain unauthorized access. This vulnerability has a CVSS score of 8.8, indicating a high impact on confidentiality, integrity, and availability, with low attack complexity. There is currently no public exploit code, active exploitation, or significant community discussion surrounding this CVE.