CVE-2020-29602: Critical severity irssi vulnerability
The official irssi docker images before 1.1-alpine (Alpine specific) contain a blank password for a root user. System using the irssi docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-29602?
CVE-2020-29602 is considered critical due to the potential for unauthorized remote root access.
How do I fix CVE-2020-29602?
To fix CVE-2020-29602, upgrade to the irssi docker image version 1.1-alpine or later.
What systems are affected by CVE-2020-29602?
CVE-2020-29602 affects systems using the irssi docker images before version 1.1-alpine.
What risk does CVE-2020-29602 pose to my system?
CVE-2020-29602 poses a risk of remote attackers gaining root access due to the blank password for the root user.
Is the fix for CVE-2020-29602 reversible?
The fix for CVE-2020-29602 is not reversible as it involves upgrading to a more secure version of the irssi docker image.