CVE-2020-35186

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The official adminer docker images before 4.7.0-fastcgi contain a blank password for a root user. System using the adminer docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Dec 17, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-351879.8The official telegraf docker images before 1.9.4-alpine (Alpine specific) contain a blank password for a root user. System using the telegraCVE-2020-351899.8The official kong docker images before 1.0.2-alpine (Alpine specific) contain a blank password for a root user. System using the kong dockerCVE-2020-35198.1A vulnerability in a specific REST API method of Cisco Data Center Network Manager (DCNM) Software could allow an authenticated, remote attaCVE-2020-351909.8The official plone Docker images before version of 4.3.18-alpine (Alpine specific) contain a blank password for a root user. System using thCVE-2020-351919.8The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. System using the drupCVE-2020-351929.8The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed byCVE-2020-351939.8The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube doCVE-2020-351959.8The official haproxy docker images before 1.8.18-alpine (Alpine specific) contain a blank password for a root user. System using the haproxyCVE-2020-351969.8The official rabbitmq docker images before 3.7.13-beta.1-management-alpine (Alpine specific) contain a blank password for a root user. SysteCVE-2020-351979.8The official memcached docker images before 1.5.11-alpine (Alpine specific) contain a blank password for a root user. System using the memcaCVE-2020-351989.8An issue was discovered in Wind River VxWorks 7. The memory allocator has a possible integer overflow in calculating a memory block's size tCVE-2020-351995.4Ignite Realtime Openfire 4.6.0 has create-bookmark.jsp groupchatJID Stored XSS.
CVE-2020-35186: Critical severity, CVSS 9.8 | Vulnix