Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2020-35186: The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may all...
CVE-2020-35186 · published 5 years ago
Summary
The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
What to do
- Update docker adminer to version 4.7.0-fastcgi or later.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| docker | adminer |
>= 4.2.5-fastcgi, < 4.7.0-fastcgi cpe:2.3:a:docker:adminer:*:*:*:*:*:*:*:* |
Original advisory text
The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may all...
The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
References
- https://github.com/koharin/koharin2/blob/main/CVE-2020-35186 Third Party Advisory
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-306Missing Authentication for Critical Function
Timeline
Published17 Dec 2020
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2020-35186 · NVD
Track software like this
Free during beta