CVE-2020-35189 | BDVDB-2026-146183 Detail

Description#

The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/koharin/koharin2/blob/main/CVE-2020-35189

Exploit#

No public exploit known

History#

Version 12020-12-17Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.