CVE-2020-35191 - The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user

Back Back to CVE browser

CRITICAL

The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user

Published Dec 17, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 4.57%

Description

The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. System using the drupal docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.