CVE-2018-19466

2019-03-2717:29:01

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

74.6%

JSON

A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.

CPENameOperatorVersion
portainereq1.16.4
portainereq1.19.2
portainereq1.16.5
portainereq1.9.2
portainereq1.17.0
portainereq1.11.0
portainereq1.12.3
portainereq1.9.3
portainereq1.0.2
portainereq1.10.2

Name	Operator	Version
portainer	eq	1.16.4
portainer	eq	1.19.2
portainer	eq	1.16.5
portainer	eq	1.9.2
portainer	eq	1.17.0
portainer	eq	1.11.0
portainer	eq	1.12.3
portainer	eq	1.9.3
portainer	eq	1.0.2
portainer	eq	1.10.2