CVE-2020-35190: Missing Authentication for Critical Function

The official plone Docker images before version of 4.3.18-alpine Alpine specific contain a blank password for a root user. System using the plone docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35191: Missing Authentication for Critical Function

The official drupal docker images before 8.5.10-fpm-alpine Alpine specific contain a blank password for a root user. System using the drupal docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35192: Missing Authentication for Critical Function

The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

PT-2020-17279 · Kong · Kong

Name of the Vulnerable Software and Affected Versions: Kong Docker images versions prior to 1.0.2-alpine Description: The issue concerns a blank password for a root user in the official Kong Docker images. This could allow a remote attacker to achieve root access with a blank password on systems...

PT-2020-17286

Name of the Vulnerable Software and Affected Versions rabbitmq versions prior to 3.7.13-beta.1-management-alpine Description The official rabbitmq docker images contain a blank password for a root user, which may allow a remote attacker to achieve root access with a blank password. Systems using...

PT-2020-17287

Name of the Vulnerable Software and Affected Versions memcached versions prior to 1.5.11-alpine Description The official memcached docker images contain a blank password for a root user, which may allow a remote attacker to achieve root access with a blank password. Systems using the memcached...

Docker Images Telegraf Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

PT-2020-17276

Name of the Vulnerable Software and Affected Versions adminer versions prior to 4.7.0-fastcgi Description The official adminer docker images contain a blank password for a root user. Systems using the adminer docker container deployed by affected versions of the docker image may allow a remote...

CVE-2020-35196: Missing Authentication for Critical Function

The official rabbitmq docker images before 3.7.13-beta.1-management-alpine Alpine specific contain a blank password for a root user. System using the rabbitmq docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank passwor...

PT-2020-17275

Name of the Vulnerable Software and Affected Versions Ghost Docker images versions prior to 2.16.1-alpine Description The issue concerns a blank password for a root user in the official Ghost Docker images. This could allow a remote attacker to gain root access to systems using the affected Docke...

PT-2020-17284

Name of the Vulnerable Software and Affected Versions influxdb versions prior to 1.7.3-meta-alpine Description The issue concerns a blank password for a root user in the official influxdb docker images. This could allow a remote attacker to achieve root access with a blank password, potentially...

CVE-2020-35187: Missing Authentication for Critical Function

The official telegraf docker images before 1.9.4-alpine Alpine specific contain a blank password for a root user. System using the telegraf docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35189: Missing Authentication for Critical Function

The official kong docker images before 1.0.2-alpine Alpine specific contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

PT-2020-17285

Name of the Vulnerable Software and Affected Versions haproxy versions prior to 1.8.18-alpine Description The official haproxy docker images contain a blank password for a root user, which may allow a remote attacker to achieve root access with a blank password. Systems using the haproxy docker...

CVE-2020-35197: Missing Authentication for Critical Function

The official memcached docker images before 1.5.11-alpine Alpine specific contain a blank password for a root user. System using the memcached docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...

PT-2020-17280

Name of the Vulnerable Software and Affected Versions plone versions prior to 4.3.18-alpine Description The issue concerns a blank password for a root user in the official plone Docker images. This could allow a remote attacker to achieve root access with a blank password, potentially affecting...

PT-2020-17277

Name of the Vulnerable Software and Affected Versions Telegraf versions prior to 1.9.4-alpine Description The issue concerns a blank password for a root user in the official Telegraf Docker images. This could allow a remote attacker to achieve root access with a blank password on systems using th...

CVE-2020-35469

The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35468

The Appbase streams Docker image 2.1.2 contains a blank password for the root user. Systems deployed using affected versions of the streams container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35193

The official sonarqube docker images before alpine Alpine specific contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password...