Exploit for Incorrect User Management in Portainer

Portainer CVE-2024-29296 Proof of Concept Script Requireme...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

Portainer CE 2.19.4 is affected by a timing-based user enumeration vulnerability in the authentication flow, enabling remote unauthenticated actors to verify usernames. This is corroborated by Red Hat, OSV, CNNVD, and other sources; a PoC exists (GitHub). Remediation status is not clearly publish...

CVE-2024-29296

creationtimestamp| type| source ---|---|--- 2024-04-09 20:39:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6997 2024-04-10 21:45:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7015 2024-12-18 02:08:08+00:00| seen| https://t.me/GithubRedTeam/9480...