Kong Inc.

Records17All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high6CVSS 7.0–8.9

Exploited now

Kong Inc. records in CISA KEV

No Kong Inc. vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Kong Alpine Docker Image · all components

TI-2020-17871 CVE-2020-35189 · GHSA-685v-qm2g-x563

MEDIUM 46

The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02201 Published 2020-12-17 No fix listed CWE-306