Many Prometheus Endpoints Expose Sensitive Data

Most publicly-exposed Prometheus endpoints can be accessed from the Internet without authentication, and JFrog found nearly 27,000 of them using Shodan, and 43,000 hosts using ZoomEye.