CVE-2020-29389

Published: Dec 2, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The official Crux Linux Docker images 3.0 through 3.4 contain a blank password for a root user. System using the Crux Linux Docker container deployed by affected versions of the Docker image may allow an attacker to achieve root access with a blank password.

Affected (1)

Products: Docker: Crux Linux Docker Image

1 product

Crux Linux Docker Image

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Docker Crux Linux Docker Image	From 3.0 to 3.4

Related CWEs

Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

References (2)

https://github.com/koharin/koharin2/blob/main/CVE-2020-29389

Source: cve@mitre.org

Third Party Advisory

https://github.com/koharin/koharin2/blob/main/CVE-2020-29389

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.