Skip to content
OpenAdvisories
Unscored CVE-2020-35193 EUVD-2020-22880GHSA-xpp6-cm2v-hmmg

The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube d…

Published Dec 15, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

References