CVE-2020-35469: Critical severity software ag terracotta server oss vulnerability

Published Dec 15, 2020

Updated

The Software AG Terracotta Server OSS Docker image 5.4.1 contains a blank password for the root user. Systems deployed using affected versions of the Terracotta Server OSS container may allow a remote attacker to achieve root access with a blank password.

Affected Software

1 affected component

Softwareag Terracotta Server Oss=5.4.1

Event History

Dec 15, 2020

CVE Published

via MITRE·11:08 PM

Data Sourced

via MITRE·11:08 PM

Description

Frequently Asked Questions

What is CVE-2020-35469?

CVE-2020-35469 is a vulnerability in the Software AG Terracotta Server OSS Docker image 5.4.1 that allows remote attackers to achieve root access with a blank password.

What is the severity of CVE-2020-35469?

The severity of CVE-2020-35469 is critical with a severity score of 9.8.

How does CVE-2020-35469 affect the Terracotta Server OSS container?

CVE-2020-35469 affects systems deployed using affected versions of the Terracotta Server OSS container, allowing a remote attacker to achieve root access with a blank password.

How can I fix CVE-2020-35469?

To fix CVE-2020-35469, update the Software AG Terracotta Server OSS Docker image to a version that does not contain a blank password for the root user.

Where can I find more information about CVE-2020-35469?

More information about CVE-2020-35469 can be found at the following link: [CVE-2020-35469](https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35469).