Vulnerability in the Docker Alpine Linux image
Official Docker Alpine Linux images, starting from version 3.3, contain an empty root user password. When using PAM or another authentication mechanism that utilizes the /etc/shadow file as a source, the system may allow the root user to log in with an empty password. Update the base image version or manually change the /etc/shadow file. The vulnerability has been fixed in versions: edge (20190228 snapshot) v3.9.2 v3.8.4 v3.7.3 v3.6.5 […]
