CVE-2023-6001 (published 2023-11-07T23:25:16.135Z)
Prometheus metrics are available without
authentication. These expose detailed and sensitive information about the YugabyteDB Anywhere environment.
Affected products: Vendor: YugabyteDB
Product: YugabyteDB Anywhere
Versions: 2.0.0.0, 2.18.4.0, 2.20.0.0