PT-2019-6304 · Portainer · Portainer

Published 2019-09-23 · Updated 2020-08-24 · CVE-2019-16874

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Portainer versions prior to 1.22.1

Description The issue is related to incorrect access control, specifically with the Role Based Access Control (RBAC) function of the Portainer container management platform. This is due to insufficient access restriction, which can allow a remote attacker to disclose protected information.

Recommendations For versions prior to 1.22.1, update to version 1.22.1 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive information and limiting user privileges until the update can be applied.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2023-00102

CVE-2019-16874

Affected Products

Portainer

References · 4

• https://osv.dev/vulnerability/CVE-2019-16874 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-00102 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-16874 · Security Note
• https://fortiguard.com/zeroday/FG-VD-19-121 · Note