critical9.8
CVE-2020-29577
The official znc docker images before 1.7.1-slim contain a blank password for a root user.
Impact
The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Znc | Znc Docker Image | Versions 1.6, 1.6-slim, 1.6.4, 1.6.4-slim, 1.6.5, 1.6.5-slim |