A user enumeration vulnerability was found in Portainer CE 2.19.4.
Priority LOW 33CWE-286Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA and GitHub.
Summary
A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.01252 69th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed github.com/portainer/portainer (Go): 0.6.1-0.20240417040827-48bc7d0d92f0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
| — | github.com/portainer/portainer (Go) | before 0.6.1-0.20240417040827-48bc7d0d92f0 | 0.6.1-0.20240417040827-48bc7d0d92f0 | Patch available | GHSA-87x6-8m9v-g8c2 |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
- github.com/portainer/portainer (Go) Vendor— Affected before 0.6.1-0.20240417040827-48bc7d0d92f0 Fixed in 0.6.1-0.20240417040827-48bc7d0d92f0 Patch available GHSA-87x6-8m9v-g8c2
Remediation
- Fix · GHSA-87x6-8m9v-g8c2 github.com/portainer/portainer (Go) Fixed in 0.6.1-0.20240417040827-48bc7d0d92f0 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2024-29296
- 2026-10-03 Alias added: GHSA-87x6-8m9v-g8c2
References
Other 6
- https://github.com/portainer/portainer/issues/11736
- https://github.com/portainer/portainer/pull/11589
- https://github.com/portainer/portainer/commit/48bc7d0d92f038e04a72c1e0585bc325eb63a9e6
- https://github.com/portainer/portainer
- https://github.com/portainer/portainer/releases/tag/2.19.5
- https://github.com/portainer/portainer/releases/tag/2.20.2
More Portainer vulnerabilities
- TI-2026-32726 Portainer: Missing authorization on Docker plugin endpoints allows host RCE CVSS 4.0CRITICAL 9.4
- TI-2026-32758 Portainer: JWT accepted in URL query leaks tokens to logs and referers CVSS 4.0HIGH 7.7
- TI-2026-32727 Portainer: Endpoint security bypass via Swarm service create/update CVSS 4.0CRITICAL 9.4
- TI-2020-14859 Portainer 1.24.1 and earlier is affected by incorrect access control that may lead to… CVSS 3.1CRITICAL 9.8
- TI-2024-22245 Portainer before 2.20.0 allows redirects when the target is not index.yaml. CVSS 3.1CRITICAL 9.1
- TI-2018-13786 A vulnerability was found in Portainer before 1.20.0. CVSS 3.0CRITICAL 9.8
Sources
- CVE-2024-29296 · CVE Program
- CVE-2024-29296 · NVD
- FIRST EPSS
- GHSA-87x6-8m9v-g8c2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences