Vulnerabilities > CVE-2020-29577 - Unspecified vulnerability in ZNC Docker Image

CVSS 10.0 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

COMPLETE

Integrity impact

COMPLETE

Availability impact

COMPLETE

network

low complexity

znc

critical

NVD

Published: 2020-12-08

Updated: 2020-12-22

Summary

The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.

Vulnerable Configurations

Part	Description	Count
Application	Znc ZNC ZNC Docker Image 1.6 ZNC ZNC Docker Image 1.6-Slim ZNC ZNC Docker Image 1.6.4 ZNC ZNC Docker Image 1.6.4-Slim ZNC ZNC Docker Image 1.6.5 ZNC ZNC Docker Image 1.6.5-Slim ZNC ZNC Docker Image 1.6.6 ZNC ZNC Docker Image 1.6.6-Slim ZNC ZNC Docker Image 1.7.0 ZNC ZNC Docker Image 1.7.0-Slim ZNC ZNC Docker Image 1.7.1-Slim	11

References

https://github.com/koharin/koharin2/blob/main/CVE-2020-29577