influxdata / influxdata/influxdb
Prometheus remote read API missing user authentication
Open
1.x
kind/enhancement
- Dominant language
- Rust
- Stars
- 31.7k
- Forks
- 3.7k
- Avg merge
- 13h 37m
- Merged PRs (30d)
- 8
Description
For 1.x, prometheus remote read API can accept username/password but influxdb server only checks the password but does not check the privilege against the target database.This means a user can access any database even though it doesn't have read privilege on.
Contributor guide
Assessment
This issue has not been assessed yet.