The Docker Docs Docker image through 2020-12-14 contains a blank password for the root user. Systems deployed using affected versions of the Docker Docs container may allow a remote attacker to achieve root access with a blank password.
References
Link | Resource |
---|---|
https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-35467 | Third Party Advisory |
Configurations
Information
Published : 2020-12-15 15:15
Updated : 2020-12-18 08:01
NVD link : CVE-2020-35467
Mitre link : CVE-2020-35467
JSON object : View
CWE
CWE-306
Missing Authentication for Critical Function
Products Affected
docker
- docs