CVE-2022-46146
MediumAdvisory
Published 29 Nov 2022In the index since 6 Sept 2026
- Severity
- Medium
- worst across findings
- CVSS
- 6.2
- base score, highest
- EPSS
- 0.012
- 66th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 56
- of 17,781 indexed, latest versions
- Container images
- 51
- deployed by those charts
- Fix available
- 1 of 1
- affected package
Prometheus Exporter-Toolkit is vulnerable to authentication bypass
Carried by container images the latest versions of 56 of 17,781 indexed charts deploy, on 51 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| github.com/ | v0.5.1, v0.6.0, v0.6.1, v0.7.0+3 more | 0.7.2, 0.8.2 | 51 |
- OSV records
- GHSA-7rg2-cxvp-9p7p
- Also known as
- GO-2022-1130
Charts affected
56 by stars
| Chart | Latest | Affected images | Radar Score |
|---|---|---|---|
| devtron-enterpriseromholdings | 48.0.0 | 1 of 28See more | 68,240 |
| devtron-operatorromholdings | 0.23.3 | 1 of 11See more | 32,902 |
| kube-prometheus-stackromholdings | 19.3.0 | 2 of 6See more | 8,645 |
| alertmanagersignoz | 0.5.2 | 1 of 1See more | 2,181 |
| temporaltemporal | 0.28.9 | 3 of 13See more | 21,005 |
| monitoringthl-chartsVerified publisher | 0.1.1 | 5 of 10See more | 18,908 |
Container images carrying it
51 by charts deploying them
A fixed version is listed for 1 of the 1 affected package.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| prom/ | a684e7c830a4 | github.com/ | 0.7.2 | 8 |
| quay.io/ | 3ea136843b2e | github.com/ | 0.7.2 | 6 |
| quay.io/ | 9ab73a421b65 | github.com/ | 0.7.2 | 5 |
| grafana/ | 1ee60f980950 | github.com/ | 0.7.2 | 4 |
| grafana/ | 00568d89c4f8 | github.com/ | 0.7.2 | 3 |
| quay.io/ | 22fbde17ab64 | github.com/ | 0.7.2 | 3 |
| quay.io/ | a990408ed288 | github.com/ | 0.7.2 | 3 |
| quay.io/ | 38d40a760569 | github.com/ | 0.7.2 | 3 |
| quay.io/ | a8779cfe553e | github.com/ | 0.7.2 | 3 |
| goelankit/ | 0d9a82dcf026 | github.com/ | 0.7.2 | 2 |
| governify/ | e83a17ba5038 | github.com/ | 0.7.2 | 2 |
| grafana/ | a136c6208aa3 | github.com/ | 0.7.2 | 2 |
| grafana/ | 057896e23443 | github.com/ | 0.7.2 | 2 |
| grafana/ | 42d3e6bc1865 | github.com/ | 0.7.2 | 2 |
| quay.io/ | 8c65b333a3d3 | github.com/ | 0.7.2 | 2 |
| quay.io/ | 23ff46c728b9 | github.com/ | 0.7.2 | 2 |
| quay.io/ | f2269e73124d | github.com/ | 0.7.2 | 2 |
| quay.io/ | df0cd5887887 | github.com/ | 0.7.2 | 2 |
| registry.k8s.io/ | 09a36e2be1db | github.com/ | 0.7.2 | 2 |
| registry.k8s.io/ | a15ca437f230 | github.com/ | 0.8.2 | 2 |
| registry.k8s.io/ | bdab4e49d71d | github.com/ | 0.7.2 | 2 |
| bitnamilegacy/ | 04768b637c94 | github.com/ | 0.7.2 | 1 |
| bitnamilegacy/ | a7e14cc919cb | github.com/ | 0.7.2 | 1 |
| grafana/ | 9746858c20e6 | github.com/ | 0.7.2 | 1 |
| grafana/ | a738d0744784 | github.com/ | 0.7.2 | 1 |
| grafana/ | cd7cb4345aa7 | github.com/ | 0.7.2 | 1 |
| grafana/ | cf81d2c753c8 | github.com/ | 0.7.2 | 1 |
| grafana/ | ecc1b80b8ca2 | github.com/ | 0.7.2 | 1 |
| grafana/ | b3af8ead67d7 | github.com/ | 0.7.2 | 1 |
| grafana/ | ab2a2569307b | github.com/ | 0.7.2 | 1 |
| grafana/ | 80c1a8eb24dd | github.com/ | 0.7.2 | 1 |
| grafana/ | 072527b12cdf | github.com/ | 0.7.2 | 1 |
| grafana/ | c16c710f7333 | github.com/ | 0.7.2 | 1 |
| intel/ | 3426deb77337 | github.com/ | 0.7.2 | 1 |
| openkruise/ | a8108f771287 | github.com/ | 0.7.2 | 1 |
| otel/ | dfb3a55ea8c9 | github.com/ | 0.7.2 | 1 |
| prom/ | 01267317c95d | github.com/ | 0.7.2 | 1 |
| prom/ | 3496e0f85943 | github.com/ | 0.7.2 | 1 |
| prom/ | 9d226d7de223 | github.com/ | 0.7.2 | 1 |
| signoz/ | 7bc7de2e33c2 | github.com/ | 0.7.2 | 1 |
| simpleidserver/ | 25e378d57d78 | github.com/ | 0.7.2 | 1 |
| utkuozdemir/ | 149f9e7e7aa3 | github.com/ | 0.7.2 | 1 |
| ghcr.io/ | d523c2c010cd | github.com/ | 0.7.2 | 1 |
| ghcr.io/ | f5dd1f7794c6 | github.com/ | 0.7.2 | 1 |
| ghcr.io/ | 2d522b664e12 | github.com/ | 0.8.2 | 1 |
| public.ecr.aws/ | 783d550ad813 | github.com/ | 0.7.2 | 1 |
| quay.io/ | 088464f949de | github.com/ | 0.7.2 | 1 |
| quay.io/ | 4748e26f9369 | github.com/ | 0.7.2 | 1 |
| quay.io/ | 56e7f18e05dd | github.com/ | 0.7.2 | 1 |
| quay.io/ | 91100b06e86d | github.com/ | 0.7.2 | 1 |