A user enumeration vulnerability was found in Portainer CE 2.19.4. This issue occurs during user authentication process, where a difference in response time could allow a remote unauthenticated user to determine if a username is valid or no…

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2024-29296 · Microsoft / collected KEV context

EUVD-2024-26308

GHSA-87x6-8m9v-g8c2

GO-2026-6619

cve-program · CVE-2024-29296

• https://github.com/ThaySolis/CVE-2024-29296

euvd · EUVD-2024-26308

• https://github.com/ThaySolis/CVE-2024-29296

nvd · CVE-2024-29296

• https://github.com/ThaySolis/CVE-2024-29296

osv · GHSA-87x6-8m9v-g8c2

• https://nvd.nist.gov/vuln/detail/CVE-2024-29296
• https://github.com/portainer/portainer/issues/11736
• https://github.com/portainer/portainer/pull/11589
• https://github.com/portainer/portainer/commit/48bc7d0d92f038e04a72c1e0585bc325eb63a9e6
• https://github.com/ThaySolis/CVE-2024-29296
• https://github.com/portainer/portainer
• https://github.com/portainer/portainer/releases/tag/2.19.5
• https://github.com/portainer/portainer/releases/tag/2.20.2

osv · GO-2026-6619

• https://github.com/advisories/GHSA-87x6-8m9v-g8c2
• https://nvd.nist.gov/vuln/detail/CVE-2024-29296
• https://github.com/portainer/portainer/commit/48bc7d0d92f038e04a72c1e0585bc325eb63a9e6
• https://github.com/portainer/portainer/pull/11589
• https://github.com/portainer/portainer/issues/11736
• https://github.com/ThaySolis/CVE-2024-29296
• https://github.com/portainer/portainer/releases/tag/2.19.5
• https://github.com/portainer/portainer/releases/tag/2.20.2

No related operational record is retained in the current change model.