CVE-2020-29591

Published: Dec 11, 2020Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Versions of the Official registry Docker images through 2.7.0 contain a blank password for the root user. Systems deployed using affected versions of the registry container may allow a remote attacker to achieve root access with a blank password.

Affected (10)

Products: Docker: Registry

Docker

1 product

Registry

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Docker Registry	Version 2.5.0
Docker Registry	Version 2.5.0 rc2
Docker Registry	Version 2.5.0 rc
Docker Registry	Version 2.5.1
Docker Registry	Version 2.5
Docker Registry	Version 2.6.0
Docker Registry	Version 2.6.0 rc2
Docker Registry	Version 2.6.1
Docker Registry	Version 2.6.1 rc2
Docker Registry	Version 2.7.0