Exploitation Summary
EIP tracks 1 public exploit for CVE-2018-19466. PoCs published by MauroEldritch.
AI-analyzed exploit summary This exploit PoC demonstrates an information leakage vulnerability in Portainer (CVE-2018-19466) where LDAP credentials are stored in plain text and can be retrieved via authenticated API calls. The script authenticates with provided credentials, retrieves a JWT token, and then fetches LDAP settings including the username, password, and host.
Description
A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.
Exploits (1)
This exploit PoC demonstrates an information leakage vulnerability in Portainer (CVE-2018-19466) where LDAP credentials are stored in plain text and can be retrieved via authenticated API calls. The script authenticates with provided credentials, retrieves a JWT token, and then fetches LDAP settings including the username, password, and host.
References (3)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H