Skip to content
OpenAdvisories
Unscored CVE-2020-35185 EUVD-2020-22872GHSA-66j6-79mp-77p6

The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost do…

Published Dec 17, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The official ghost docker images before 2.16.1-alpine (Alpine specific) contain a blank password for a root user. System using the ghost docker container deployed by affected versions of the docker image may allow a remote attacker to achieve root access with a blank password.

References