User Enumeration Vulnerability in Portainer CE by Portainer
CVE-2024-29296

5.3MEDIUM

Key Information:

Vendor

Portainer

Status
Portainer CE
Vendor
CVE Published:
10 April 2024

Badges

👾 Exploit Exists

What is CVE-2024-29296?

A user enumeration vulnerability has been identified in Portainer CE version 2.19.4. This security flaw arises during the user authentication process, where variations in response times may allow remote unauthenticated attackers to ascertain the validity of usernames. Such information could be leveraged to execute targeted attacks, making it imperative for users to address this vulnerability promptly. For further details, visit the official Portainer website or the GitHub reference.

References

https://github.com/ThaySolis/CVE-2024-29296

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.