Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2020-29578
HistoryDec 08, 2020 - 3:15 p.m.

CVE-2020-29578

2020-12-0815:15:11
mitre
web.nvd.nist.gov
29
4
piwik
docker
fpm-alpine
alpine
nvd
cve-2020-29578

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.009

Percentile

83.0%

JSON

The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access.

Affected configurations

Nvd
Node
matomopiwik_fpm-alpine_docker_imageMatch3
OR
matomopiwik_fpm-alpine_docker_imageMatch3.5
OR
matomopiwik_fpm-alpine_docker_imageMatch3.5.1
OR
matomopiwik_fpm-alpine_docker_imageMatch3.6
OR
matomopiwik_fpm-alpine_docker_imageMatch3.6.0
VendorProductVersionCPE
matomopiwik_fpm-alpine_docker_image3cpe:2.3:a:matomo:piwik_fpm-alpine_docker_image:3:*:*:*:*:*:*:*
matomopiwik_fpm-alpine_docker_image3.5cpe:2.3:a:matomo:piwik_fpm-alpine_docker_image:3.5:*:*:*:*:*:*:*
matomopiwik_fpm-alpine_docker_image3.5.1cpe:2.3:a:matomo:piwik_fpm-alpine_docker_image:3.5.1:*:*:*:*:*:*:*
matomopiwik_fpm-alpine_docker_image3.6cpe:2.3:a:matomo:piwik_fpm-alpine_docker_image:3.6:*:*:*:*:*:*:*
matomopiwik_fpm-alpine_docker_image3.6.0cpe:2.3:a:matomo:piwik_fpm-alpine_docker_image:3.6.0:*:*:*:*:*:*:*

Social References

More

Related

nvd 1
prion 1
cvelist 1
openvas 2
nvd
nvd
CVE-2020-29578
2020-12-08 15:15:11
prion
prion
Default credentials
2020-12-08 15:15:00
cvelist
cvelist
CVE-2020-29578
2020-12-08 15:02:12
openvas
openvas
Unpassworded (Blank Password) 'root' Account (SSH)
2019-05-24 00:00:00
Unpassworded (Blank Password) 'root' Account (Telnet)
2019-05-24 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.009

Percentile

83.0%

JSON
Related for CVE-2020-29578
nvd1prion1cvelist1openvas2