Threats tagged 'ghsa-597x-6fqq-75wr'

Prometheus versions up to 3.15.1 have a credential leak vulnerability that enables attackers to capture Azure AD or Google IAM bearer tokens. This occurs when remote_write requests are redirected to a malicious host, allowing token replay and unauthorized metric writes to the victim's backend.