storm Docker Security Vulnerabilities

Apache Storm is an open source distributed real-time computing system developed in Clojure concurrent programming language by the Apache Foundation. A security vulnerability exists in Storm Docker Image versions prior to 1.2.1 that stems from the official image containing a blank password for the...

CVE-2020-29389

The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allow an attacker to achieve root access with a blank password...

Apple macOS 10.13.1 (High Sierra) - Blank Root Local Privilege Escalation

Apple macOS 10.13.1 High Sierra - Blank Root Local Privilege Escalation Source: https://twitter.com/lemiorhan/status/935578694541770752 & https://forums.developer.apple.com/thread/79235 "Dear @AppleSupport, we noticed a HUGE security issue at MacOS High Sierra. Anyone can login as "root" with emp...

Apple macOS 10.13.1 (High Sierra) - 'Blank Root' Local Privilege Escalation

Source: https://twitter.com/lemiorhan/status/935578694541770752 & https://forums.developer.apple.com/thread/79235 "Dear @AppleSupport, we noticed a HUGE security issue at MacOS High Sierra. Anyone can login as "root" with empty password after clicking on login button several times. Are you aware ...

CVE-2016-1341

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...

CVE-2016-1341

Cisco NX-OS 7.01N11, 7.01N13, and 7.04N11 on Nexus 2000 Fabric Extender devices has a blank root password, which allows local users to gain privileges via unspecified vectors, aka Bug ID CSCur22079...

CVE-2013-2297

CVE-2013-2297 concerns Eucalyptus EuStore in default EMI configurations (EMI 3868652036, EMI 0400376721, EMI 2425352071, EMI 1347115203). The issue arises from a blank root password being set, enabling local users to gain privileges via unspecified vectors. This is a local-privilege-escalation ri...

MySQL 3.20.32 - 3.23.52 Weak Default Configuration

The version of MySQL installed on the remote host is 3.20.32 to 3.23.52. On Windows, the default configuration used in these versions is weak : - The database server binds to all network interfaces and can be reached from outside. CVE-2002-1921 - Logging is disabled, attackers will not be detecte...

Shiva LanRover Blank Password

The Shiva LanRover has no password set for the root user account. An attacker is able to telnet to this system and gain access to any phone lines attached to this device. Additionally, the LanRover can be used as a relay point for further attacks via the telnet and rlogin functionality available...