cbcvebase.

Weave Cloud Agent vulnerabilities

1 known vulnerability affecting weave/cloud_agent.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-35464P2CRITICALCVSS 9.8v1.3.02020-12-15
CVE-2020-35464 [CRITICAL] CWE-306 CVE-2020-35464: Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Sys Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password.
nvd
Weave Cloud Agent vulnerabilities | cvebase