CVE-2024-29296

MediumCVSS 5.3/10Last modified Jul 9, 2026

Description

A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or not.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-286

Affected software

No affected versions have been published.

Timeline

Published: Apr 10, 2024
Last modified: Jul 9, 2026
NVD status: Modified

Related CVEs from 2024

CVE-2024-29309.8A vulnerability was found in SourceCodester Music Gallery Site 1.0. It has been declared as critical. Affected by this vulnerability is an u CVE-2024-293017.5SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-admin.php?admin_id=CVE-2024-293027.5SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection via update-employee.php.CVE-2024-293039.8The delete admin users function of SourceCodester PHP Task Management System 1.0 is vulnerable to SQL Injection CVE-2024-293097.7An issue in Alfresco Content Services v.23.3.0.7 allows a remote attacker to execute arbitrary code via the Transfer Service.CVE-2024-29314.3The WPFront User Role Editor plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 3.2.CVE-2024-293166.3NodeBB 3.6.7 is vulnerable to Incorrect Access Control, e.g., a low-privileged attacker can access the restricted tabs for the Admin group v CVE-2024-293185.4Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascri CVE-2024-293199.8Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. The server can make CVE-2024-29327.5A vulnerability classified as critical has been found in SourceCodester Online Chatting System 1.0. Affected is an unknown function of the f CVE-2024-293208.1Wallos before 1.15.3 is vulnerable to SQL Injection via the category and payment parameters to /subscriptions/get.php.CVE-2024-29336.4The Page Builder Gutenberg Blocks – CoBlocks plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the Social Profiles widge