HexBrain

Kubernetes · Report #1000922

Unsecured Grafana instance on https://monitoring.prow-canary.k8s.io/dashboards

Duplicatestatus
highseverity
4upvotes
7 Jan 2021disclosed

How it was found

Hi, I was looking at https://monitoring.prow-canary.k8s.io Grafana webapp. I'm not sure if it is for demo purposes, but I can access the main dashboard and view all graphs. https://monitoring.prow-canary.k8s.io/dashboards

If indeed it is for demo purposes, please let me close the report myself. looking forward to hearing from you Thank you

Impact

access charts on various server resource usage.

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original