CVE-2020-35192

2020-12-1702:15:00

Google

osv.dev

7.3 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

79.7%

JSON

The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

CPENameOperatorVersion
vaulteq0.9.2
vaulteq0.10.4
vaulteq0.6.2
vaulteq0.11.4
vaulteq0.7.1
vaulteq0.8.2
vaulteq0.9.5
vaulteq0.9.0
vaulteq0.11.2
vaulteq0.7.2