critical9.8
CVE-2022-24961
In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.
Impact
In Portainer Agent before 2.11.1, an API server can continue running even if not associated with a Portainer instance in the past few days.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Portainer | Portainer | before 2.11.1 |
References
- NVD record
- CVE.org record
- https://github.com/portainer/agent/compare/2.11.0...2.11.1
- https://github.com/portainer/agent/pull/225/commits/a66977c76043fcff4a8f69c4b65988272d27c01f
- https://github.com/portainer/portainer/issues/6420
- https://www.portainer.io/blog/should-you-expose-portainer-or-agent-to-the-internet
- https://github.com/portainer/agent/compare/2.11.0...2.11.1
- https://github.com/portainer/agent/pull/225/commits/a66977c76043fcff4a8f69c4b65988272d27c01f
- https://github.com/portainer/portainer/issues/6420
- https://www.portainer.io/blog/should-you-expose-portainer-or-agent-to-the-internet