Latest portainer portainer Vulnerabilities

● CVE-2022-24961

Portainer Portainer<2.11.1

● CVE-2021-41874

** DISPUTED ** An unauthorized access vulnerabiitly exists in all versions of Portainer, which could let a malicious user obtain sensitive information. NOTE: Portainer has received no detail of this C...

Portainer Portainer

● CVE-2021-42650

Portainer Portainer<2.9.1

● CVE-2020-24263

Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical ca...

Portainer Portainer<=1.24.1

● CVE-2020-24264

Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to remote arbitrary code execution. The restriction checks for bind mounts are applied only on the client-side and no...

Portainer Portainer<=1.24.1

● CVE-2019-16877

Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).

Portainer Portainer<1.22.1

● CVE-2019-16872

Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).

Portainer Portainer<1.22.1

● CVE-2019-16878

Portainer before 1.22.1 has XSS (issue 2 of 2).

Portainer Portainer<1.22.1

● CVE-2019-16876

Portainer before 1.22.1 allows Directory Traversal.

Portainer Portainer<1.22.1

● CVE-2019-16874

Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).

Portainer Portainer<1.22.1

● CVE-2019-16873

Portainer before 1.22.1 has XSS (issue 1 of 2).

Portainer Portainer<1.22.1

● CVE-2018-19466

A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.

Portainer Portainer<1.20.0

● CVE-2018-19367

Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404 if admin was not created and 204 if it wa...

Portainer Portainer<=1.19.2

● CVE-2018-16316

A stored Cross-site scripting (XSS) vulnerability in Portainer through 1.19.1 allows remote authenticated users to inject arbitrary JavaScript and/or HTML via the Team Name field.

Portainer Portainer<=1.19.1

● CVE-2018-12678

Portainer before 1.18.0 supports unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the /websocket/exec endpoint, which allows remote attackers to bypass int...

Portainer Portainer<1.18.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.