SonarSource

Records12All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

SonarSource records in CISA KEV

No SonarSource vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Sonarqube Docker Image · all components

TI-2020-17875 CVE-2020-35193 · GHSA-xpp6-cm2v-hmmg

MEDIUM 46

The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02155 Published 2020-12-15 No fix listed CWE-306