Vulnerabilities > CVE-2018-19367 - Unspecified vulnerability in Portainer

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

portainer

NVD

Published: 2018-11-20

Updated: 2019-10-03

Summary

Portainer through 1.19.2 provides an API endpoint (/api/users/admin/check) to verify that the admin user is already created. This API endpoint will return 404 if admin was not created and 204 if it was already created. Attackers can set an admin password in the 404 case.

Vulnerable Configurations

Part	Description	Count
Application	Portainer Portainer Portainer 1.0.0 Portainer Portainer 1.0.1 Portainer Portainer 1.0.2 Portainer Portainer 1.0.3 Portainer Portainer 1.0.4 Portainer Portainer 1.1.0 Portainer Portainer 1.2.0 Portainer Portainer 1.3.0 Portainer Portainer 1.4.0 Portainer Portainer 1.5.0 Portainer Portainer 1.6.0 Portainer Portainer 1.7.0 Portainer Portainer 1.8.0 Portainer Portainer 1.8.1 Portainer Portainer 1.9.0 Portainer Portainer 1.9.1 Portainer Portainer 1.9.2 Portainer Portainer 1.9.3 Portainer Portainer 1.10.0 Portainer Portainer 1.10.1 Portainer Portainer 1.10.2 Portainer Portainer 1.11.0 Portainer Portainer 1.11.1 Portainer Portainer 1.11.2 Portainer Portainer 1.11.3 Portainer Portainer 1.11.4 Portainer Portainer 1.12.0 Portainer Portainer 1.12.1 Portainer Portainer 1.12.2 Portainer Portainer 1.12.3 Portainer Portainer 1.12.4 Portainer Portainer 1.13.0 Portainer Portainer 1.13.1 Portainer Portainer 1.13.2 Portainer Portainer 1.13.3 Portainer Portainer 1.13.4 Portainer Portainer 1.13.5 Portainer Portainer 1.13.6 Portainer Portainer 1.14.0 Portainer Portainer 1.14.1 Portainer Portainer 1.14.2 Portainer Portainer 1.14.3 Portainer Portainer 1.15.0 Portainer Portainer 1.15.1 Portainer Portainer 1.15.2 Portainer Portainer 1.15.3 Portainer Portainer 1.15.4 Portainer Portainer 1.15.5 Portainer Portainer 1.16.0 Portainer Portainer 1.16.1 Portainer Portainer 1.16.2 Portainer Portainer 1.16.3 Portainer Portainer 1.16.4 Portainer Portainer 1.16.5 Portainer Portainer 1.17.0 Portainer Portainer 1.17.1 Portainer Portainer 1.18.0 Portainer Portainer 1.18.1 Portainer Portainer 1.19.0 Portainer Portainer 1.19.1 Portainer Portainer 1.19.2	61

Summary

Vulnerable Configurations

References