10

CVE-2020-29576

The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eggheads ≫ Eggdrop Docker Image Version 1.6
Eggheads ≫ Eggdrop Docker Image Version 1.6.21
Eggheads ≫ Eggdrop Docker Image Version 1.8.0
Eggheads ≫ Eggdrop Docker Image Version 1.8.0 Update rc1
Eggheads ≫ Eggdrop Docker Image Version 1.8.0 Update rc2
Eggheads ≫ Eggdrop Docker Image Version 1.8.0 Update rc3
Eggheads ≫ Eggdrop Docker Image Version 1.8.0 Update rc4
Eggheads ≫ Eggdrop Docker Image Version 1.8.1
Eggheads ≫ Eggdrop Docker Image Version 1.8.1 Update rc2
Eggheads ≫ Eggdrop Docker Image Version 1.8.2
Eggheads ≫ Eggdrop Docker Image Version 1.8.2 Update rc1
Eggheads ≫ Eggdrop Docker Image Version 1.8.2 Update rc2
Eggheads ≫ Eggdrop Docker Image Version 1.8.3
Eggheads ≫ Eggdrop Docker Image Version 1.8.3 Update rc1
Eggheads ≫ Eggdrop Docker Image Version 1.8.4
Eggheads ≫ Eggdrop Docker Image Version 1.8.4 Update rc1
Eggheads ≫ Eggdrop Docker Image Version 1.8.4 Update rc2
Eggheads ≫ Eggdrop Docker Image Version 1.8.4 Update rc3
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.98% 0.855
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://github.com/koharin/koharin2/blob/main/CVE-2020-29576
Third Party Advisory