CVE-2018-19466 PoC — Portainer 信任管理问题漏洞

Source

Associated Vulnerability

Title: Portainer 信任管理问题漏洞 (CVE-2018-19466)
Description:A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.

Description

LEMPO (Ldap Exposure on POrtainer) is an exploit for CVE-2018-19466 (LDAP Credentials Disclosure on Portainer). Featured @ DevFest Siberia 2018

Readme

# Lempo: LDAP Exposure on POrtainer
# CVE-2018-19466 | Mauro Eldritch AKA plaguedoktor

```
./lempo.rb TARGET_IP TARGET_USER TARGET_PASSWORD
```
This exploit is a complement to my talk [Hacking Docker with PAZUZU](https://github.com/MauroEldritch/PAZUZU).

![PoC](https://github.com/MauroEldritch/lempo/blob/master/media/cve-2018-19466.png)

## Presentations

|#| Date | Conference | Link to Video | Link to Slides |
|---|---|---|---|---|
|1| NOV-2018 | DEVFEST Siberia | TBA | https://drive.google.com/open?id=1uXFrLTIIdrypM4ECQxIYF1dz2iVf1OG6w09eB_KkFnA |

Issued patched by the software authors @ portainer.io via [portainer/portainer#2488](https://github.com/portainer/portainer/pull/2488)

[MITRE CVE Announcement](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19466)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →