diff --git a/exposures/configs/prometheus-flags-endpoint.yaml b/exposures/configs/prometheus-flags-endpoint.yaml index 2f4110f253..0cefa431fc 100644 --- a/exposures/configs/prometheus-flags-endpoint.yaml +++ b/exposures/configs/prometheus-flags-endpoint.yaml @@ -1,9 +1,9 @@ id: prometheus-flags-endpoint info: - name: Exposure of sensitive operational information via Prometheus flags API endpoint + name: Prometheus flags API endpoint author: geeknik - severity: medium + severity: info description: The flags endpoint provides a full path to the configuration file. If the file is stored in the home directory, it may leak a username. reference: https://jfrog.com/blog/dont-let-prometheus-steal-your-fire/ tags: prometheus,exposure