PT-2020-17330

Name of the Vulnerable Software and Affected Versions Weave Cloud Agent version 1.3.0 Description The Weave Cloud Agent Docker image contains a blank password for the root user, which may allow a remote attacker to achieve root access. This issue affects systems deployed using the affected versio...

Docker Image AG Terracotta Server OSS Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports the creation of a container lightweight virtual machine and the deployment and running of applications on Linux systems, as well as the automated installation, deployment, and upgrading of...

CoScale agent Docker image security vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

PT-2020-17334

Name of the Vulnerable Software and Affected Versions Appbase streams Docker image version 2.1.2 Description The issue concerns a blank password for the root user in the Appbase streams Docker image. This could allow a remote attacker to gain root access with a blank password, potentially...

PT-2020-17328

Name of the Vulnerable Software and Affected Versions CoScale agent Docker image version 3.16.0 Description The issue concerns a blank password for the root user in the CoScale agent Docker image. This could allow a remote attacker to gain root access with a blank password. Systems deployed using...

PT-2020-17329

Name of the Vulnerable Software and Affected Versions Instana Dynamic APM Docker image version 1.0.0 Description The issue is related to a blank password for the root user in the Instana Dynamic APM Docker image. This could allow a remote attacker to achieve root access with a blank password,...

PT-2020-17332 · Blackfire · Blackfire Docker Image

Name of the Vulnerable Software and Affected Versions: Blackfire Docker image through 2020-12-14 Description: The issue concerns a blank password for the root user in the Blackfire Docker image. This could allow a remote attacker to achieve root access with a blank password, potentially...

Docker Image Blackfire Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

PT-2020-17335

Name of the Vulnerable Software and Affected Versions Software AG Terracotta Server OSS Docker image version 5.4.1 Description The issue concerns a blank password for the root user in the affected Docker image. This could allow a remote attacker to gain root access with a blank password...

Weave Cloud Agent Docker image Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

CVE-2020-35193: Missing Authentication for Critical Function

The official sonarqube docker images before alpine Alpine specific contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35462: Missing Authentication for Critical Function

Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the CoScale agent container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35469: Missing Authentication for Critical Function

The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35468: Missing Authentication for Critical Function

The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected versions of the streams container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35466: Missing Authentication for Critical Function

The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Blackfire container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35463: Missing Authentication for Critical Function

Version 1.0.0 of the Instana Dynamic APM Docker image contains a blank password for the root user. Systems deployed using affected versions of the Instana Dynamic APM container may allow a remote attacker to achieve root access with a blank password...

PT-2020-17283

Name of the Vulnerable Software and Affected Versions sonarqube versions prior to Alpine Description The official sonarqube docker images contain a blank password for a root user, which may allow a remote attacker to achieve root access with a blank password. This issue affects systems using the...

CVE-2020-29602

The official irssi docker images before 1.1-alpine Alpine specific contain a blank password for a root user. System using the irssi docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password...

CVE-2020-29575

The official elixir Docker images before 1.8.0-alpine Alpine specific contain a blank password for a root user. Systems using the elixir Linux Docker container deployed by affected versions of the Docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-29578

The official piwik Docker images before fpm-alpine Alpine specific contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access...