CVE-2024-29296 PoC — Portainer 安全漏洞

Source

https://github.com/Lavender-exe/CVE-2024-29296-PoC

Associated Vulnerability

Title: Portainer 安全漏洞 (CVE-2024-29296)
Description:A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

Description

User Enumeration through response time difference

Readme

# Portainer CVE-2024-29296 Proof of Concept Script

>[!important]
>Will be released once Portainer fixes it in update 2.22

## Requirements
`pip install -r requirements.txt`

## Usage

```bash
placeholder
```

## Credits

Reported by:
- https://github.com/ThaySolis/CVE-2024-29296

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →