未評価
The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notary docker container deployed by...
CVE-2020-29601
SecPulse初出
原文の説明 取得元が公開している説明をそのまま載せています (多くは英語)。
The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notary docker container deployed by affected versions of the docker image may allow an remote attacker to achieve root access with a blank password.
参照URL
- advisory github.com