Weave

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical4CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Weave records in CISA KEV

No Weave vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Cloud Agent · all components

TI-2020-17992 CVE-2020-35464 · GHSA-xm7q-pmpg-2fgh

MEDIUM 46

Version 1.3.0 of the Weave Cloud Agent Docker image contains a blank password for the root user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02079 Published 2020-12-15 No fix listed CWE-306