7.5
CVSS
Tencent Docs Desktop 3.9.20 and earlier suffers from Missing SSL Certificate Validation in the update component.
Severity: HIGH
📦
docs
Vendor: docker
Actively Exploited
0
CISA KEV List
PoC / Exploits
0
Code Available
Total RCEs
0
Remote Access
Total CVEs
1
Total Indexed
Avg. EPSS
1.06%
Exploit Prob.
Security Vulnerability Index
Page 1 / 1
9.8
CVSS
The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password.
Severity: CRITICAL