UpHeron
All vulnerabilities

Servers and applications

CVE-2020-35192

The official vault docker images before 0.11.6 contain a blank password for a root user. System using the vault docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

Severity
Critical 9.8
Published
17 Dec 2020
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
0.11.6
Sources
NVD

Affected software

SoftwareAffected versions
HashiCorp VaultServers and applications · cpe:a:hashicorp:vault
  • From 0.6.0 before 0.11.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2020-35192
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2020-35192