Skip to content
OpenAdvisories
Unscored CVE-2020-35466 EUVD-2020-23138GHSA-rpjh-cf7h-2jw5

The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the …

Published Dec 15, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The Blackfire Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Blackfire container may allow a remote attacker to achieve root access with a blank password.

References