CVE-2018-19466 PoC — Portainer 信任管理问题漏洞

Description

LEMPO (Ldap Exposure on POrtainer) is an exploit for CVE-2018-19466 (LDAP Credentials Disclosure on Portainer). Featured @ DevFest Siberia 2018

介绍

# Lempo: LDAP Exposure on POrtainer
# CVE-2018-19466 | Mauro Eldritch AKA plaguedoktor

```
./lempo.rb TARGET_IP TARGET_USER TARGET_PASSWORD
```
This exploit is a complement to my talk [Hacking Docker with PAZUZU](https://github.com/MauroEldritch/PAZUZU).

![PoC](https://github.com/MauroEldritch/lempo/blob/master/media/cve-2018-19466.png)

## Presentations

|#| Date | Conference | Link to Video | Link to Slides |
|---|---|---|---|---|
|1| NOV-2018 | DEVFEST Siberia | TBA | https://drive.google.com/open?id=1uXFrLTIIdrypM4ECQxIYF1dz2iVf1OG6w09eB_KkFnA |

Issued patched by the software authors @ portainer.io via [portainer/portainer#2488](https://github.com/portainer/portainer/pull/2488)

[MITRE CVE Announcement](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19466)

文件快照

备注