Portainer 安全漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts from Portainer Open Source. A security vulnerability exists in Portainer versions prior to 2.20.2 that stems from incorrect use of a cryptographic algorithm in the AesEncrypt function...

CVE-2024-33662

Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function...

CVE-2024-33662

CVE-2024-33662 affects Portainer and is due to improper use of an encryption algorithm in the AesEncrypt function. The CVE entry indicates a base score of 7.5 (HIGH) with NETWORK attack vector, HIGH impact on confidentiality, integrity, and availability, and requires low privileges with no user i...

CVE-2024-33662

Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function...

PT-2024-25421 · Portainer +2 · Portainer +2

Name of the Vulnerable Software and Affected Versions: Portainer versions prior to 2.20.2 Description: The issue is related to the improper use of an encryption algorithm in the AesEncrypt function. This flaw can lead to weak encryption. There is no information provided about the estimated number...

The vulnerability of the Portainer container management platform, related to improper user management, allows a hacker to determine whether a user’s name is valid or not.

The vulnerability of the Portainer container management platform is related to the difference in user authentication response time. Exploiting this vulnerability allows a remote attacker to determine whether a user’s name is valid or not...

ROS-20240816-01

A vulnerability in the Portainer container management platform is related to a difference in authentication user authentication response time. Exploitation of the vulnerability could allow an attacker acting remotely to determine whether a username is valid or invalid. remotely, whether the...

The vulnerability of the Portainer container management platform, related to the use of open redirection, allows a hacker to redirect users to any desired website.

The vulnerability of the Portainer container management platform is related to the use of open redirection. Exploiting this vulnerability could allow a attacker to redirect users to any desired website...

ROS-20240606-08

A vulnerability in the Portainer container management platform is related to the use of open redirection. Exploitation of the vulnerability could allow an attacker to redirect a user to an arbitrary site...

Open Redirect

github.com/portainer/portainer is vulnerable to Open Redirect. The vulnerability is due to improper validation of user-supplied URLs which allow redirects to arbitrary web pages not limited to index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-33661

CVE-2024-33661 affects Portainer prior to 2.20.0, allowing open redirects when the target is not index.yaml. Multiple sources (NVD/OSV/NVD mirrors, Red Hat, Veracode, PT Security) confirm that the vulnerability enables redirection to arbitrary sites, with PT Security additionally describing an SS...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

PT-2024-4001 · Portainer +1 · Portainer +1

Name of the Vulnerable Software and Affected Versions: Portainer versions prior to 2.20.0 Description: The issue is related to the use of open redirects in the Portainer container management platform. This could allow an attacker to redirect a user to an arbitrary site. The problem is associated...

CVE-2024-33661

Portainer before 2.20.0 allows redirects when the target is not index.yaml...

Portainer 安全漏洞

Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. A security vulnerability exists in Portainer versions prior to 2.20.0 that stems from allowing redirection when the target is not index.yaml...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...

CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not...