CVE-2020-29591

Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of...

Original description

The description as published by the source.

Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacker to achieve root access with a blank password.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

advisory github.com
package github.com
web hub.docker.com