CVE-2020-29601 - The official notary docker images before signer-0.6.1-1 contain a blank password for a root user

Back Back to CVE browser

CRITICAL

The official notary docker images before signer-0.6.1-1 contain a blank password for a root user

Published Dec 8, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 2.32%

Description

The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notary docker container deployed by affected versions of the docker image may allow an remote attacker to achieve root access with a blank password.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (1)

https://github.com/koharin/koharin2/blob/main/CVE-2020-29601
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://github.com/koharin/koharin2/blob/main/CVE-2020-29601		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 8, 2020

Updated Aug 4, 2024

Reserved Dec 7, 2020

Link CVE-2020-29601

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-29601

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-29601