Cleartext Storage Vulnerability in Portainer by Portainer.io
CVE-2018-19466
9.8CRITICAL
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2018-19466?
A security flaw has been identified in Portainer versions prior to 1.20.0, where LDAP credentials are stored in cleartext format. This significant oversight allows unauthorized access through API calls, potentially compromising user accounts and their associated permissions. Organizations utilizing Portainer should take immediate action to upgrade their installations, thereby safeguarding sensitive information and maintaining overall system integrity.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.