Open Redirect

github.com/portainer/portainer is vulnerable to Open Redirect. The vulnerability is due to improper validation of user-supplied URLs which allow redirects to arbitrary web pages not limited to index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

PT-2024-4001 · Portainer +1 · Portainer +1

Name of the Vulnerable Software and Affected Versions: Portainer versions prior to 2.20.0 Description: The issue is related to the use of open redirects in the Portainer container management platform. This could allow an attacker to redirect a user to an arbitrary site. The problem is associated...

CVE-2024-33661

CVE-2024-33661 affects Portainer prior to 2.20.0, allowing open redirects when the target is not index.yaml. Multiple sources (NVD/OSV/NVD mirrors, Red Hat, Veracode, PT Security) confirm that the vulnerability enables redirection to arbitrary sites, with PT Security additionally describing an SS...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

Portainer 安全漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. A security vulnerability exists in Portainer versions prior to 2.20.0 that stems from allowing redirection when the target is not index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

Portainer 安全漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. A security vulnerability exists in Portainer CE version 2.19.4 that stems from the presence of a user enumeration vulnerability that could allow an unauthenticated remote user to determine if a...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

Portainer CE 2.19.4 is affected by a timing-based user enumeration vulnerability in the authentication flow, enabling remote unauthenticated actors to verify usernames. This is corroborated by Red Hat, OSV, CNNVD, and other sources; a PoC exists (GitHub). Remediation status is not clearly publish...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

PT-2024-5801 · Unknown +1 · Portainer Ce +1

Name of the Vulnerable Software and Affected Versions: Portainer CE version 2.19.4 Description: A user enumeration issue is present in the user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

The vulnerability of the Portainer container management platform lies in the incorrect limitation of the path name for the restricted access catalog, allowing attackers to upload arbitrary files into the system.

The vulnerability of the Portainer container management platform is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability allows a malicious actor to upload arbitrary files into the system remotely...

The vulnerability of the Portainer container management platform, related to deficiencies in the authentication process, allows a perpetrator to gain full access to the file system.

The vulnerability of the Portainer container management platform is related to deficiencies in the authentication process. Exploiting this vulnerability allows a malicious actor to gain full access to the host’s file system through the host management API...

The vulnerability of the Portainer container management platform, related to deficiencies in access control, allows a hacker to gain full access to the host’s file system.

The vulnerability of the Portainer container management platform is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full access to the host’s file system...

The vulnerability of the Role-Based Access Control (RBAC) function in the Portainer container management platform allows a perpetrator to disclose protected information.

The vulnerability of the Role-Based Access Control RBAC access control function in the Portainer container management platform is related to deficiencies in access restriction. Exploiting this vulnerability could allow a malicious actor, operating remotely, to disclose sensitive information...

The vulnerability of the Portainer container management platform arises from the lack of measures taken to protect the website structure, allowing attackers to perform cross-site scripting attacks.

The vulnerability of the Portainer container management platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...