The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank password.
References
Link | Resource |
---|---|
https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35469 | Third Party Advisory |
Configurations
Information
Published : 2020-12-15 16:15
Updated : 2020-12-17 10:37
NVD link : CVE-2020-35469
Mitre link : CVE-2020-35469
JSON object : View
CWE
CWE-306
Missing Authentication for Critical Function
Products Affected
softwareag
- terracotta_server_oss