GitHub Advisoryadvisory · Go

GHSA-9mjw-79r6-c9m8 Portainer improperly uses an encryption algorithm in the AesEncrypt function

HIGH Published 2024-10-02 Modified 2024-12-04 Official page ↗
Aliases
CVE-2024-33662
Ecosystem
Go
Packages
github.com/portainer/portainer
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-326, CWE-327
Reviewed
2024-10-02

Affected packages

• Go github.com/portainer/portainer: < 2.20.2 → fixed in 2.20.2

Description

Portainer before 2.20.2 improperly uses an encryption algorithm in the `AesEncrypt` function.

Related

Alias · CVE (1)

  • CVE-2024-33662 Portainer before 2.20.2 improperly uses an encryption algorithm in the AesEncrypt function. vulnerability

Weakness · CWE (2)

  • CWE-326 Inadequate Encryption Strength weakness
  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness

References