The vulnerability of the Portainer container management platform, related to improper user management, allows a hacker to determine whether a user’s name is valid or not.

The vulnerability of the Portainer container management platform is related to the difference in user authentication response time. Exploiting this vulnerability allows a remote attacker to determine whether a user’s name is valid or not...

ROS-20240816-01

A vulnerability in the Portainer container management platform is related to a difference in authentication user authentication response time. Exploitation of the vulnerability could allow an attacker acting remotely to determine whether a username is valid or invalid. remotely, whether the...

The vulnerability of the Portainer container management platform, related to the use of open redirection, allows a hacker to redirect users to any desired website.

The vulnerability of the Portainer container management platform is related to the use of open redirection. Exploiting this vulnerability could allow a attacker to redirect users to any desired website...

ROS-20240606-08

A vulnerability in the Portainer container management platform is related to the use of open redirection. Exploitation of the vulnerability could allow an attacker to redirect a user to an arbitrary site...

Open Redirect

github.com/portainer/portainer is vulnerable to Open Redirect. The vulnerability is due to improper validation of user-supplied URLs which allow redirects to arbitrary web pages not limited to index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-33661

Portainer versions prior to 2.20.0 are vulnerable to an Open Redirect vulnerability (CWE-601). The root cause is the improper validation of user-supplied URLs, which allows an attacker to redirect users to arbitrary web pages other than index.yaml . This flaw is associated with Server-Side Reques...

PT-2024-4001 · Portainer +1 · Portainer +1

Name of the Vulnerable Software and Affected Versions: Portainer versions prior to 2.20.0 Description: The issue is related to the use of open redirects in the Portainer container management platform. This could allow an attacker to redirect a user to an arbitrary site. The problem is associated...

CVE-2024-33661: URL Redirection to Untrusted Site

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

Portainer 安全漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. A security vulnerability exists in Portainer versions prior to 2.20.0 that stems from allowing redirection when the target is not index.yaml...

Portainer CE allows username enumeration through authentication response timing

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

GHSA-87X6-8M9V-G8C2 Portainer CE allows username enumeration through authentication response timing

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

Portainer 安全漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. A security vulnerability exists in Portainer CE version 2.19.4 that stems from the presence of a user enumeration vulnerability that could allow an unauthenticated remote user to determine if a...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

PT-2024-5801 · Unknown +1 · Portainer Ce +1

Name of the Vulnerable Software and Affected Versions: Portainer CE version 2.19.4 Description: A user enumeration issue is present in the user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not. This...