| Package | Affected versions | Patched versions |
|---|---|---|
| drupal docker images | = 8.3.0-fpm-alpine≥ 8.3.1-fpm-alpine, ≤ 8.5.10-fpm-alpine |
The official drupal docker images before 8.5.10-fpm-alpine (Alpine specific) contain a blank password for a root user. System using the drupal docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free