Prometheus Server Bound to 0.0.0.0 #806
Description
The Prometheus HTTP server is bound to all interfaces within the container, and the port is exposed.
This allows for various information to be disclosed to attackers, and is available as a potential DDOS target.
Impact is limited since this isn’t internet exposed, but it is reachable within the same docker network, and could get published by Oracle operators unaware of the risk.