PT-2020-17333 · Docker · Docker Docs Docker Image
Published
2020-12-15
·
Updated
2020-12-18
·
CVE-2020-35467
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Docker Docs Docker image through 2020-12-14
Description
The issue concerns a blank password for the root user in the Docker Docs Docker image. This could allow a remote attacker to achieve root access with a blank password, potentially compromising systems deployed using affected versions of the Docker Docs container.
Recommendations
For Docker Docs Docker image through 2020-12-14, update the image to a version released after 2020-12-14 to ensure the root user password is properly set.
As a temporary workaround, consider setting a strong password for the root user manually until an updated image is available.
Restrict access to the Docker Docs container to minimize the risk of exploitation by a remote attacker.
Exploit
Fix
Missing Authentication
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Docker Docs Docker Image