10
CVSSv2

CVE-2020-35193

Published: 16/12/2020 Updated: 21/12/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote malicious user to achieve root access with a blank password.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sonarsource sonarqube docker image 4.5.7

sonarsource sonarqube docker image 5.5

sonarsource sonarqube docker image 5.6

sonarsource sonarqube docker image 5.6.1

sonarsource sonarqube docker image 5.6.2

sonarsource sonarqube docker image 5.6.3

sonarsource sonarqube docker image 5.6.4

sonarsource sonarqube docker image 5.6.5

sonarsource sonarqube docker image 5.6.7

sonarsource sonarqube docker image 6.0

sonarsource sonarqube docker image 6.1

sonarsource sonarqube docker image 6.2

sonarsource sonarqube docker image 6.3

sonarsource sonarqube docker image 6.3.1

sonarsource sonarqube docker image 6.4

sonarsource sonarqube docker image 6.5

sonarsource sonarqube docker image 6.6

sonarsource sonarqube docker image 6.7

sonarsource sonarqube docker image 6.7.1

sonarsource sonarqube docker image 6.7.2

sonarsource sonarqube docker image 6.7.3

sonarsource sonarqube docker image 6.7.4

sonarsource sonarqube docker image 6.7.5

sonarsource sonarqube docker image 7.0

sonarsource sonarqube docker image 7.1

sonarsource sonarqube docker image lts