CVE-2024-33662
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Oct 2, 2024
Updated: Dec 4, 2024
CWE ID 326
Summary
CVE-2024-33662 refers to a vulnerability affecting Portainer before version 2.20.2. The issue lies in the implementation of the AesEncrypt function, which incorrectly utilizes an encryption algorithm. This flaw can potentially expose sensitive data to unauthorized access or manipulation, posing a significant risk to users. It is strongly advised to update Portainer to the latest version to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.