VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Dec 17, 2020· Updated Jun 17, 2026

CVE-2020-35190

CVE-2020-35190

Description

The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user. System using the plone docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Plone (software)/Plone2 versions
    cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:plone:plone:*:*:*:*:*:*:*:*range: >=4.0.0-alpine,<4.3.18-alpine
    • (no CPE)range: <4.3.18-alpine
  • plone/plone Docker imagesdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.