{"id":"CVE-2018-19466","details":"A vulnerability was found in Portainer before 1.20.0. Portainer stores LDAP credentials, corresponding to a master password, in cleartext and allows their retrieval via API calls.","modified":"2026-08-07T15:11:26.545147Z","published":"2019-03-27T17:29:01.980Z","references":[{"type":"ADVISORY","url":"https://github.com/portainer/portainer/releases"},{"type":"FIX","url":"https://github.com/MauroEldritch/lempo"},{"type":"FIX","url":"https://github.com/portainer/portainer/pull/2488"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/portainer/portainer","events":[{"introduced":"0"},{"fixed":"6b05a3588142a9279f4d363c8a679d3380243caf"}],"database_specific":{"cpe":"cpe:2.3:a:portainer:portainer:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"1.20.0"}],"source":"CPE_RANGE"}}],"versions":["1.11.3","internal-1.6.0","internal-1.5.0","internal-1.4.0","internal-1.3.0","internal-1.2.0","v0.6.0","v0.5"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-19466.json"}}],"schema_version":"1.8.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}