Lucene search
Veracode Vulnerability DatabaseVERACODE:29744HistoryMar 17, 2021 - 8:12 a.m.
Privilege Escalation
2021-03-1708:12:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
83
0.003 Low
EPSS
Percentile
70.2%
github.com/portainer/portainer is vulnerable to privilege escalation. The vulnerability exists due to an insecure permissions in the isValidStackFile function allowing non-admin user to spawn new containers critical capabilities such as SYS_MODULE, which can be used to take over the Docker host.
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/portainer/portainer | le | 1.24.1 |
Related
osv
osv
CVE-2020-24263
2021-03-16 15:15:12
cve
cve
CVE-2020-24263
2021-03-16 15:15:12
cvelist
cvelist
CVE-2020-24263
2021-03-16 14:42:39
nvd
nvd
CVE-2020-24263
2021-03-16 15:15:12
prion
prion
Code injection
2021-03-16 15:15:00