EUVD-2020-23136

Malware in sbrugna...

CVE-2020-35464

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35464

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35464

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password...

Design/Logic Flaw

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password...

CVE-2020-35464

The CVE-2020-35464 entry concerns the Weave Cloud Agent Docker image, version 1.3.0, which ships with a blank root password. This vulnerability could allow a remote attacker to gain root access to affected systems. The available documents confirm the issue but do not provide exploit details or a ...

PT-2020-17330

Name of the Vulnerable Software and Affected Versions Weave Cloud Agent version 1.3.0 Description The Weave Cloud Agent Docker image contains a blank password for the root user, which may allow a remote attacker to achieve root access. This issue affects systems deployed using the affected versio...

Weave Cloud Agent Docker image Access Control Error Vulnerability

Docker is an open source application container engine from the American company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrading of applications...

CVE-2020-35464: Missing Authentication for Critical Function

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password...