PT-2018-11327 · Portainer · Portainer

Published 2018-06-22 · Updated 2018-08-13 · CVE-2018-12678

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.18.0

Description The issue allows remote attackers to bypass intended access restrictions or conduct SSRF attacks due to unauthenticated requests to the websocket endpoint with an unvalidated id query parameter for the "/websocket/exec" endpoint.

Recommendations For versions prior to 1.18.0, update to version 1.18.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the "/websocket/exec" endpoint until a patch is available. Avoid using the id query parameter in the affected endpoint until the issue is resolved.

Fix

SSRF

Weakness Enumeration

CWE-918

Related Identifiers

CVE-2018-12678

Affected Products

Portainer

References · 4

• https://github.com/portainer/portainer/pull/1979 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2018-12678 · Security Note
• https://osv.dev/vulnerability/CVE-2018-12678 · Vendor Advisory
• https://github.com/portainer/portainer/releases/tag/1.18.0 · Note