PT-2018-11327 · Portainer · Portainer

Publicado 2018-06-22 · Atualizado 2018-08-13 · CVE-2018-12678

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.18.0

Description The issue allows remote attackers to bypass intended access restrictions or conduct SSRF attacks due to unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the "/websocket/exec" endpoint.

Recommendations For versions prior to 1.18.0, update to version 1.18.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/websocket/exec" endpoint until a patch is available. Avoid using the id query parameter in the affected endpoint until the issue is resolved.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2018-12678

Produtos afetados

Portainer

Referências · 4

• https://github.com/portainer/portainer/pull/1979 · Correção
• https://github.com/portainer/portainer/releases/tag/1.18.0 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-12678 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-12678 · Aviso do Fabricante