CVE-2020-35192

    Dashboard / Vulnerabilities / CVE-2020-35192

    CVE-2020-35192

    Published: 17 Dec 2020Last Modified: 8 Jul 2026

    Summary:

    Details: The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

    References: https://github.com/koharin/koharin2/blob/main/CVE-2020-35192

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- d2d0aa07d079836c9a5bd258479b019ca00eb6b8
    Fixed -dad2b6048153fea5efbc0c06a5f35c06c767b308

    Affected versions

    v0.11.5
    v0.11.4
    v0.11.2
    v0.11.1
    v0.11.0
    v0.11.0-beta1

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2020-35192 | CVE-DB