10

CVE-2020-29576

The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Eggheads ≫ Eggdrop Docker Image Version1.6.21
Eggheads ≫ Eggdrop Docker Image Version1.8.0
Eggheads ≫ Eggdrop Docker Image Version1.8.0 Updaterc1
Eggheads ≫ Eggdrop Docker Image Version1.8.0 Updaterc2
Eggheads ≫ Eggdrop Docker Image Version1.8.0 Updaterc3
Eggheads ≫ Eggdrop Docker Image Version1.8.0 Updaterc4
Eggheads ≫ Eggdrop Docker Image Version1.8.1
Eggheads ≫ Eggdrop Docker Image Version1.8.1 Updaterc2
Eggheads ≫ Eggdrop Docker Image Version1.8.2
Eggheads ≫ Eggdrop Docker Image Version1.8.2 Updaterc1
Eggheads ≫ Eggdrop Docker Image Version1.8.2 Updaterc2
Eggheads ≫ Eggdrop Docker Image Version1.8.3
Eggheads ≫ Eggdrop Docker Image Version1.8.3 Updaterc1
Eggheads ≫ Eggdrop Docker Image Version1.8.4
Eggheads ≫ Eggdrop Docker Image Version1.8.4 Updaterc1
Eggheads ≫ Eggdrop Docker Image Version1.8.4 Updaterc2
Eggheads ≫ Eggdrop Docker Image Version1.8.4 Updaterc3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.07% 0.823
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.