critical9.8
CVE-2020-29389
The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user.
Impact
The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allow an attacker to achieve root access with a blank password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Docker | Crux Linux Docker Image | from 3.0 through 3.4 |