cbcvebase.

Sonarsource Sonarqube Docker Image vulnerabilities

1 known vulnerability affecting sonarsource/sonarqube_docker_image.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-35193P2CRITICALCVSS 9.8v4.5.7v5.5+24 more2020-12-16
CVE-2020-35193 [CRITICAL] CWE-306 CVE-2020-35193: The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
nvd
Sonarsource Sonarqube Docker Image vulnerabilities | cvebase