Executive brief
Portainer improperly uses an encryption algorithm in the AesEncrypt function in github.com/portainer/portainer
Affected products
- Go github.com/portainer/portainer
Junglewise Threat Intelligence
CVE-2024-33662: GO-2024-3172 - Portainer improperly uses an encryption algorithm in the AesEncrypt function in github.com/portainer/portainer
CVE-2024-33662 · Severity: low · CVSS 3.1 · Published 2024-10-09
Technologies: github.com/portainer/portainer (Go). Vendors: Go.
Related threats
- Portainer Community Edition improper authentication in setup endpoints
- Portainer Community Edition directory traversal in backup restore
- Portainer Community Edition missing authorization in custom template endpoint
- Portainer Community Edition sensitive token leakage via URL query parameter
- Portainer authorization bypass in Kubernetes middleware