← All advisories

High severityNVD Advisory· Published Oct 2, 2024· Updated Dec 4, 2024

CVE-2024-33662

CVE-2024-33662

Description

Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/portainer/portainerGo	< 2.20.2	2.20.2

Affected products

8

Portainer/Portainercpe-rescue
ghsa-coords7 versions
pkg:golang/github.com/portainer/portainer pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.5 pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2015.6 pkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Tumbleweed pkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP5 pkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Package%20Hub%2015%20SP6 pkg:rpm/suse/govulncheck-vulndb&distro=SUSE%20Package%20Hub%2012
< 2.20.2+ 6 more
- (no CPE)range: < 2.20.2
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241030T212825-1.1
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241030T212825-150000.1.9.1
- (no CPE)range: < 0.0.20241104T154416-5.1

Patches

Vulnerability mechanics

References

6

github.com/advisories/GHSA-9mjw-79r6-c9m8ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2024-33662ghsaADVISORY
github.com/portainer/portainer/compare/2.20.1...2.20.2ghsaWEB
github.com/portainer/portainer/issues/11737ghsaWEB
pkg.go.dev/vuln/GO-2024-3172ghsaWEB
www.portainer.ioghsaWEB

News mentions

0

No linked articles in our index yet.