VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 17, 2020· Updated Jun 17, 2026

CVE-2020-35187

CVE-2020-35187

Description

The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegraf docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Influxdata/Telegraf
    cpe:2.3:a:influxdata:telegraf:*:*:*:*:*:*:*:*
    Range: >=0.13.0-alpine,<1.9.4-alpine
  • telegraf/telegraf docker imagesdescription
  • Telegraf/telegrafllm-create
    Range: <1.9.4-alpine

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.