Skip to content
Cortex Security Audit
blog.quarkslab.com | research | #open-source | #access-control | #security-audit | #audit | #ostif | #prometheus | #multi-tenancy | #tenant-isolation
Summary
Quarkslab audited Cortex, a multi-tenant Prometheus time-series store, for OSTIF: seven findings, including tenant impersonation via PushStream gRPC, were identified and all resolved.
- Published
- Collected