CVE-2020-29389

2020-12-0216:55:25

mitre

www.cve.org

crux linux

docker

blank password

root access

cve-2020-29389

AI Score

9.6

Confidence

High

EPSS

0.002

Percentile

60.7%

JSON

The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allow an attacker to achieve root access with a blank password.

References

github.com/koharin/koharin2/blob/main/CVE-2020-29389