441 matches found
CVE-2020-24263
Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYSMODULE, which can be used to take over the Docker host...
CVE-2020-24263
Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYSMODULE, which can be used to take over the Docker host...
CVE-2020-24263
CVE-2020-24263 affects Portainer ≤ 1.24.1. The issue is an insecure permissions vulnerability that allows a non-admin user to spawn new containers with critical capabilities (e.g., SYS_MODULE), enabling potential remote code execution and host takeovers. The available connected documents confirm ...
CVE-2020-24263: Incorrect Permission Assignment for Critical Resource
Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYSMODULE, which can be used to take over the Docker host...
PT-2021-11023
Name of the Vulnerable Software and Affected Versions: Portainer versions 1.24.1 and earlier Description: The issue is related to incorrect access control, which may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on the client-side and not the...
PT-2021-11022
Name of the Vulnerable Software and Affected Versions: Portainer versions 1.24.1 and earlier Description: The issue is related to insecure permissions, potentially leading to remote arbitrary code execution. A non-admin user can spawn new containers with critical capabilities, such as SYS MODULE,...
Portainer 权限许可和访问控制问题漏洞
Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. An insecure privilege vulnerability exists in Portainer 1.24.1 and earlier versions. An attacker can exploit the vulnerability to execute arbitrary code...
Portainer 访问控制错误漏洞
Portainer is a lightweight user management interface for managing Docker environments and Docker hosts. Portainer 1.24.1 suffers from an access control error vulnerability that could lead to remote arbitrary code execution...
CVE-2020-24264: Incorrect Authorization
Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on the client-side and not the server-side, which can lead to spawning a container with bind mount. Once such a container ...
@agneta/cli (>=0.14.7, <=0.14.15), @servisbot/servisbot-cli (>=9.4.0, <=10.3.2) +3 more potentially affected by CVE-2020-7774 via y18n (4.0.0)
y18n NPM version 4.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on y18n and may be impacted: - @agneta/cli =0.14.7, =9.4.0, =0.14.4, =1.0.0-rc.1, =1.0.0-rc.7 Source cves: CVE-2020-7774 Source advisory: SNYK:JS-Y18N-1021887...
Portainer Directory Traversal Vulnerability
Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. A directory traversal vulnerability exists in Portainer versions prior to 1.22.1. An attacker can exploit this vulnerability to upload files to arbitrary locations...
Portainer Cross-Site Scripting Vulnerability (CNVD-2019-40484)
Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. A stored cross-site scripting vulnerability exists in the isteven-multi-select component in Portainer versions prior to 1.22.1. An attacker can exploit this vulnerability to inject...
Portainer Access Control Error Vulnerability (CNVD-2019-40489)
Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. An Access Control Error vulnerability exists in the RBAC extension in Portainer versions prior to 1.22.1. An attacker can exploit this vulnerability to access sensitive information via...
Portainer Cross-Site Scripting Vulnerability (CNVD-2019-40486)
Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. A cross-site scripting vulnerability exists in Portainer versions prior to 1.22.1. An attacker can exploit this vulnerability to inject arbitrary Javascript into Portainer pages viewed...
Portainer Access Control Error Vulnerability (CNVD-2019-40490)
Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. An access control error vulnerability exists in the Stack creation feature in Portainer versions prior to 1.22.1. An attacker can exploit this vulnerability to gain full privileges to...
Portainer Access Control Error Vulnerability
Portainer is an open source lightweight management UI that allows you to easily manage docker hosts or clusters. An access control error vulnerability exists in Portainer versions prior to 1.22.1. An attacker can exploit this vulnerability to gain full privileges to the host file system via the...
Portainer < 1.22.1 Multiple Vulnerabilities
Portainer is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:portainer:portainer"; ifdescripti...
CVE-2019-16878
Portainer before 1.22.1 has XSS issue 2 of 2...
