CVE-2020-29601: Critical severity docker notary vulnerability
Published Dec 8, 2020
·Updated
The official notary docker images before signer-0.6.1-1 contain a blank password for a root user. System using the notary docker container deployed by affected versions of the docker image may allow an remote attacker to achieve root access with a blank password.
Affected Software
1 affected component
Docker notary docker image<signer-0.6.1-1
Event History
Dec 8, 2020
CVE Published
via MITRE·03:09 PM
Data Sourced
via MITRE·03:09 PM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2020-29601.
2
What is the severity of CVE-2020-29601?
The severity of CVE-2020-29601 is critical with a CVSS score of 9.8.
3
What is the affected software of CVE-2020-29601?
The affected software of CVE-2020-29601 is the notary docker image before signer-0.6.1-1.
4
What is the risk of this vulnerability?
This vulnerability could allow a remote attacker to achieve root access with a blank password.
5
Is there a fix available for CVE-2020-29601?
Yes, updating to signer-0.6.1-1 or later can address this vulnerability.