Docker images of Alpine were shipped with an empty password for the root user.
Security researchers from Cisco have revealed details about a vulnerability (CVE-2019-5021) in the Alpine distribution builds for the Docker container isolation system. The essence of the identified issue is that a blank password was set by default for the root user, allowing direct login as root without restriction. Recall that Alpine is used to create official images from the Docker project (previously, official builds were based on […]
