CVE-2024-29296

CVE-2024-29296 - Перечисление пользователей в Portainer CE - 2.19.4 Уязвимость перечисления пользователей была обнаружена в Portainer CE 2.19.4. Эта проблема возникает в процессе аутентификации пользователей, когда разница во времени ответа может позволить удаленному неаутентифицированному...

CVE-2024-29296-PoC

Portainer CVE-2024-29296 Скрипт доказательства концепции Требования python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Использование python3 main.py Enter Target URL: Enter Username List: Авторы Сообщили:...

Exploit for Incorrect User Management in Portainer

Portainer CVE-2024-29296 Proof of Concept Script Requireme...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

A user enumeration vulnerability exists in Portainer CE 2.19.4 due to a timing difference during the user authentication process. This allows a remote unauthenticated attacker to determine if a username is valid by observing the response times of login requests; valid users consistently trigger l...

CVE-2024-29296

creationtimestamp| type| source ---|---|--- 2024-04-09 20:39:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6997 2024-04-10 21:45:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7015 2024-12-18 02:08:08+00:00| seen| https://t.me/GithubRedTeam/9480...