CVE-2024-29296

CVE-2024-29296 - User enumeration on Portainer CE - 2.19.4 A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or...

CVE-2024-29296-PoC

Portainer CVE-2024-29296 概念验证脚本 环境要求 root@kitploit: python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt 使用方法 root@kitploit: python3 main.py Enter Target URL: Enter Username List: 致谢 报告者： https://github.com/ThaySolis/CVE-2024-29296...

Exploit for Incorrect User Management in Portainer

Portainer CVE-2024-29296 Proof of Concept Script Requireme...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

Portainer CE 2.19.4 is affected by a timing-based user enumeration vulnerability in the authentication flow, enabling remote unauthenticated actors to verify usernames. This is corroborated by Red Hat, OSV, CNNVD, and other sources; a PoC exists (GitHub). Remediation status is not clearly publish...

CVE-2024-29296

creationtimestamp| type| source ---|---|--- 2024-04-09 20:39:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6997 2024-04-10 21:45:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7015 2024-12-18 02:08:08+00:00| seen| https://t.me/GithubRedTeam/9480...