CVE-2020-24263

Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution

published March 16, 2021

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution. A non-admin user is allowed to spawn new containers with critical capabilities such as SYS_MODULE, which can be used to take over the Docker host.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01601 · 75.6th percentile
Published
2021-03-16T14:42Z
EPSS history
Timeline
  • 16 MAR 14:42Z
    Portainer 1.24.1 and earlier is affected by an insecure permissions vulnerability that may lead to remote arbitrary code execution
    cvelistv5