Credential Sniffing Vulnerability in Pterodactyl Panel by Pterodactyl

CVE-2019-1020002

What is CVE-2019-1020002?

The Pterodactyl panel prior to version 0.7.14 is susceptible to a credential sniffing vulnerability involving two-factor authentication (2FA). This flaw can potentially allow attackers to intercept user credentials during the 2FA process, exposing sensitive information and risking unauthorized access to user accounts. It is crucial for users of the Pterodactyl panel to ensure that they upgrade to the latest version to safeguard against this security risk.

References