CVE-2020-29591 - Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user

Back Back to CVE browser

CRITICAL

Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user

Published Dec 11, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.65%

Description

Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacker to achieve root access with a blank password.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-521

References (3)

https://github.com/docker/distribution-library-image
x_refsource_MISCProduct
https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-29591
x_refsource_MISCThird Party Advisory
https://hub.docker.com/_/registry
x_refsource_MISCProduct

Link	Providers	Tags
https://github.com/docker/distribution-library-image		x_refsource_MISCProduct
https://github.com/donghyunlee00/CVE/blob/main/CVE-2020-29591		x_refsource_MISCThird Party Advisory
https://hub.docker.com/_/registry		x_refsource_MISCProduct

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 11, 2020

Updated Aug 4, 2024

Reserved Dec 6, 2020

Link CVE-2020-29591

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-29591

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-29591

Description

Affected products

Remediation

References (3)

Change history (0)