CVE-2020-29578

CRITICAL

9.8

CVSS Severity Score

EPSS Score0.1550%

EPSS Percentile11.91th

Published2020年12月8日

Last Modified2024年11月21日

Vulnerability Description

The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access.

Affected Platforms (CPE)

📦

Matomo

Piwik Fpm Alpine Docker Image

= 3

📦

Matomo

Piwik Fpm Alpine Docker Image

= 3.5

📦

Matomo

Piwik Fpm Alpine Docker Image

= 3.5.1

📦

Matomo

Piwik Fpm Alpine Docker Image

= 3.6

📦

Matomo

Piwik Fpm Alpine Docker Image

= 3.6.0

References & Advisories

🔗 https://github.com/koharin/koharin2/blob/main/CVE-2020-29578

Vulnerability Description

Affected Platforms (CPE)

Piwik Fpm Alpine Docker Image

Piwik Fpm Alpine Docker Image

Piwik Fpm Alpine Docker Image

Piwik Fpm Alpine Docker Image

Piwik Fpm Alpine Docker Image

References & Advisories

相关漏洞威胁