Búsqueda de    
Vulnerabilidad   
    Buscar 191973 Descripciones CVE y
86218 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.108586
Categoría:Default Accounts
Título:Unpassworded 'root' Account (Telnet)
Resumen:The remote host has set no password for the root account.
Descripción:Summary:
The remote host has set no password for the root account.

Vulnerability Insight:
It was possible to login with the 'root' username and without passing
a password.

Vulnerability Impact:
This issue may be exploited by a remote attacker to gain access to
sensitive information or modify system configuration.

Affected Software/OS:
Versions of the Official Alpine Linux Docker images (since v3.3) are
known to be affected. Other products / devices might be affected as well.

Solution:
Set a password for the 'root' account. If this is an Alpine Linux Docker image
update to one of the following image releases:

edge (20190228 snapshot), v3.9.2, v3.8.4, v3.7.3, v3.6.5.

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2019-5021
BugTraq ID: 108288
http://www.securityfocus.com/bid/108288
https://alpinelinux.org/posts/Docker-image-vulnerability-CVE-2019-5021.html
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0782
SuSE Security Announcement: openSUSE-SU-2019:1495 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00004.html
Common Vulnerability Exposure (CVE) ID: CVE-1999-0502
CopyrightCopyright (C) 2019 Greenbone Networks GmbH

Esta es sólo una de 86218 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2020 E-Soft Inc. Todos los derechos reservados.