CVE-2020-29578
Severity Score
9.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access.
Las imágenes oficiales de piwik Docker anteriores a fpm-alpine (específicas de Alpine) contienen una contraseña en blanco para un usuario root. Los sistemas que usan el contenedor Piwik Docker implementado por las versiones afectadas de la imagen de Docker pueden permitir a un atacante remoto lograr un acceso root
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2020-12-05 CVE Reserved
- 2020-12-08 CVE Published
- 2024-08-04 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (1)
| URL | Tag | Source |
|---|---|---|
| https://github.com/koharin/koharin2/blob/main/CVE-2020-29578 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Matomo Search vendor "Matomo" | Piwik Fpm-alpine Docker Image Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" | 3 Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" and version "3" | - |
Affected
| ||||||
| Matomo Search vendor "Matomo" | Piwik Fpm-alpine Docker Image Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" | 3.5 Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" and version "3.5" | - |
Affected
| ||||||
| Matomo Search vendor "Matomo" | Piwik Fpm-alpine Docker Image Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" | 3.5.1 Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" and version "3.5.1" | - |
Affected
| ||||||
| Matomo Search vendor "Matomo" | Piwik Fpm-alpine Docker Image Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" | 3.6 Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" and version "3.6" | - |
Affected
| ||||||
| Matomo Search vendor "Matomo" | Piwik Fpm-alpine Docker Image Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" | 3.6.0 Search vendor "Matomo" for product "Piwik Fpm-alpine Docker Image" and version "3.6.0" | - |
Affected
| ||||||