The official eggdrop Docker images before 1.8.4rc2 contain a blank password for a root user. Systems using the Eggdrop Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
References
Link | Resource |
---|---|
https://github.com/koharin/koharin2/blob/main/CVE-2020-29576 | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2020-12-08 08:15
Updated : 2020-12-22 06:30
NVD link : CVE-2020-29576
Mitre link : CVE-2020-29576
JSON object : View
CWE
Products Affected
eggheads
- eggdrop_docker_image