critical9.8
CVE-2020-35462
Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user.
Impact
Version 3.16.0 of the CoScale agent Docker image contains a blank password for the root user. Systems deployed using affected versions of the CoScale agent container may allow a remote attacker to achieve root access with a blank password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Coscale Agent Project | Coscale Agent | Version 3.16.0 |