CVE-2024-29296

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2024-04-10

Last modified

2026-07-09

Weaknesses

CWE-286

Affected products

• Portainer (Portainer)

References

• https://github.com/ThaySolis/CVE-2024-29296