Root Access Vulnerability in Notary Docker Images by Docker, Inc.
CVE-2020-29601

9.8CRITICAL

Key Information:

Vendor

Docker

Status
Notary Docker Image
Vendor
CVE Published:
8 December 2020

What is CVE-2020-29601?

The Notary Docker images released prior to version signer-0.6.1-1 are affected by a significant security flaw, wherein the root user account is configured with a blank password. This vulnerability can be exploited by remote attackers, enabling them to gain unauthorized root access to systems utilizing these affected docker images. Organizations using these images should promptly upgrade to secure versions to mitigate potential risks.

References

https://github.com/koharin/koharin2/blob/main/CVE-2020-29601
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.