| Package | Affected versions | Patched versions |
|---|---|---|
| sonarqube docker image | = 4.5.7= 5.5= 5.6= 5.6.1= 5.6.2= 5.6.3= 5.6.4= 5.6.5= 5.6.7= 6.0= 6.1= 6.2= 6.3= 6.3.1= 6.4= 6.5= 6.6= 6.7= 6.7.1= 6.7.2= 6.7.3= 6.7.4= 6.7.5= 7.0= 7.1= lts |
The official sonarqube docker images before alpine (Alpine specific) contain a blank password for a root user. System using the sonarqube docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free