CVE-2024-29296

CVE-2024-29296 - Enumeración de usuarios en Portainer CE - 2.19.4 Se encontró una vulnerabilidad de enumeración de usuarios en Portainer CE 2.19.4. Este problema ocurre durante el proceso de autenticación de usuarios, donde una diferencia en el tiempo de respuesta podría permitir que un usuario...

CVE-2024-29296-PoC

Script de Prueba de Concepto de Portainer CVE-2024-29296 Requisitos root@kitploit: python3 -m venv venv; source venv/bin/activate pip install -r requirements.txt Add usernames to usernames.txt Uso root@kitploit: python3 main.py Enter Target URL: Enter Username List: Créditos Reportado por:...

Exploit for Incorrect User Management in Portainer

Portainer CVE-2024-29296 Proof of Concept Script Requireme...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

Portainer CE 2.19.4 is affected by a timing-based user enumeration vulnerability in the authentication flow, enabling remote unauthenticated actors to verify usernames. This is corroborated by Red Hat, OSV, CNNVD, and other sources; a PoC exists (GitHub). Remediation status is not clearly publish...

CVE-2024-29296

creationtimestamp| type| source ---|---|--- 2024-04-09 20:39:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6997 2024-04-10 21:45:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7015 2024-12-18 02:08:08+00:00| seen| https://t.me/GithubRedTeam/9480...