CVSS 9.8 · Critical EPSS 2,2%
Kerentanan Missing Authentication for Critical Function pada sonarsource sonarqube docker image. Skor CVSS 3.1 9.8 (Critical) menurut NVD.
The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| sonarsource | sonarqube docker image | Versi 4.5.7 |
| sonarsource | sonarqube docker image | Versi 5.5 |
| sonarsource | sonarqube docker image | Versi 5.6 |
| sonarsource | sonarqube docker image | Versi 5.6.1 |
| sonarsource | sonarqube docker image | Versi 5.6.2 |
| sonarsource | sonarqube docker image | Versi 5.6.3 |
| sonarsource | sonarqube docker image | Versi 5.6.4 |
| sonarsource | sonarqube docker image | Versi 5.6.5 |
| sonarsource | sonarqube docker image | Versi 5.6.7 |
| sonarsource | sonarqube docker image | Versi 6.0 |
| sonarsource | sonarqube docker image | Versi 6.1 |
| sonarsource | sonarqube docker image | Versi 6.2 |
| sonarsource | sonarqube docker image | Versi 6.3 |
| sonarsource | sonarqube docker image | Versi 6.3.1 |
| sonarsource | sonarqube docker image | Versi 6.4 |
| sonarsource | sonarqube docker image | Versi 6.5 |
| sonarsource | sonarqube docker image | Versi 6.6 |
| sonarsource | sonarqube docker image | Versi 6.7 |
| sonarsource | sonarqube docker image | Versi 6.7.1 |
| sonarsource | sonarqube docker image | Versi 6.7.2 |
| sonarsource | sonarqube docker image | Versi 6.7.3 |
| sonarsource | sonarqube docker image | Versi 6.7.4 |
| sonarsource | sonarqube docker image | Versi 6.7.5 |
| sonarsource | sonarqube docker image | Versi 7.0 |
| sonarsource | sonarqube docker image | Versi 7.1 |
| sonarsource | sonarqube docker image | Versi lts |