Skip to content
OpenAdvisories
Unscored CVE-2020-35464 EUVD-2020-23136GHSA-xm7q-pmpg-2fgh

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions o…

Published Dec 15, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the Weave Cloud Agent container may allow a remote attacker to achieve root access with a blank password.

References