A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or no…

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2024-29296 · CVE overview and exploitation status

EUVD-2024-26308

GHSA-87x6-8m9v-g8c2

GO-2026-6619

cve-program · CVE-2024-29296

• https://github.com/ThaySolis/CVE-2024-29296

euvd · EUVD-2024-26308

• https://github.com/ThaySolis/CVE-2024-29296

nvd · CVE-2024-29296

• https://github.com/ThaySolis/CVE-2024-29296

osv · GHSA-87x6-8m9v-g8c2

• https://nvd.nist.gov/vuln/detail/CVE-2024-29296
• https://github.com/portainer/portainer/issues/11736
• https://github.com/portainer/portainer/pull/11589
• https://github.com/portainer/portainer/commit/48bc7d0d92f038e04a72c1e0585bc325eb63a9e6
• https://github.com/ThaySolis/CVE-2024-29296
• https://github.com/portainer/portainer
• https://github.com/portainer/portainer/releases/tag/2.19.5
• https://github.com/portainer/portainer/releases/tag/2.20.2

osv · GO-2026-6619

• https://github.com/advisories/GHSA-87x6-8m9v-g8c2
• https://nvd.nist.gov/vuln/detail/CVE-2024-29296
• https://github.com/portainer/portainer/commit/48bc7d0d92f038e04a72c1e0585bc325eb63a9e6
• https://github.com/portainer/portainer/pull/11589
• https://github.com/portainer/portainer/issues/11736
• https://github.com/ThaySolis/CVE-2024-29296
• https://github.com/portainer/portainer/releases/tag/2.19.5
• https://github.com/portainer/portainer/releases/tag/2.20.2

No related changes are available here.