PT-2019-6304 · Portainer · Portainer

Publicado 2019-09-23 · Atualizado 2020-08-24 · CVE-2019-16874

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.22.1

Description The issue is related to incorrect access control, specifically with the Role Based Access Control (RBAC) function of the Portainer container management platform. This is due to insufficient access restriction, which can allow a remote attacker to disclose protected information.

Recommendations For versions prior to 1.22.1, update to version 1.22.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and limiting user privileges until the update can be applied.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2023-00102

CVE-2019-16874

Produtos afetados

Portainer

Referências · 4

• https://osv.dev/vulnerability/CVE-2019-16874 · Aviso do Fabricante
• https://fortiguard.com/zeroday/FG-VD-19-121 · Nota
• https://bdu.fstec.ru/vul/2023-00102 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2019-16874 · Nota de Segurança