{"id":34143,"date":"2019-10-31T21:56:37","date_gmt":"2019-10-31T18:56:37","guid":{"rendered":"https:\/\/prohoster.info\/blog\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root\/"},"modified":"2019-10-31T21:56:37","modified_gmt":"2019-10-31T18:56:37","slug":"19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","status":"publish","type":"post","link":"https:\/\/prohoster.info\/nl\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","title":{"rendered":"19,4% van de 1000 populairste Docker-containers bevatten een leeg rootwachtwoord","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Jerry Gamblin besloot te onderzoeken hoe wijdverbreid het onlangs ontdekte probleem is <noindex><a rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50654\">een probleem<\/a><\/noindex> in Docker-images van de Alpine-distributie, gerelateerd aan het gebruik van een leeg wachtwoord voor de gebruiker root. Een analyse van duizend van de populairste containers in de Docker Hub-catalogus <noindex><a rel=\"nofollow\" href=\"https:\/\/www.kennasecurity.com\/20-of-the-1000-most-popular-docker-containers-have-no-root-password\/\">toonde<\/a><\/noindex>, die in <noindex><a rel=\"nofollow\" href=\"https:\/\/gist.github.com\/jgamblin\/6015a2020c1de3bc3aab19b361573b7f\">194<\/a><\/noindex> waarvan (19,4%) voor root een leeg wachtwoord is ingesteld zonder de account te blokkeren (&#171;root:::0:::::&#187; in plaats van &#171;root:!::0:::::&#187;).<\/p>\n<p>Bij het gebruik van de pakketten shadow en linux-pam in de container kan de toegang met een leeg root-wachtwoord <noindex><a rel=\"nofollow\" href=\"https:\/\/alpinelinux.org\/posts\/Docker-image-vulnerability-CVE-2019-5021.html\">toe<\/a><\/noindex> de privileges binnen de container verhogen bij ongeautoriseerde toegang tot de container of na het exploiteren van een kwetsbaarheid in een niet-bevoorrechte service die in de container draait. Toegang tot de container met root-rechten kan ook worden verkregen wanneer er toegang is tot de infrastructuur, d.w.z. de mogelijkheid om via de terminal verbinding te maken met de TTY die is gespecificeerd in de lijst \/etc\/securetty. Inloggen via SSH met een leeg wachtwoord is geblokkeerd.<\/p>\n<p>De meest populaire onder <noindex><a rel=\"nofollow\" href=\"https:\/\/gist.github.com\/jgamblin\/6015a2020c1de3bc3aab19b361573b7f\">containers met een leeg root-wachtwoord<\/a><\/noindex> zijn <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/microsoft\/azure-cli\">microsoft\/azure-cli<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/kylemanna\/openvpn\/\">kylemanna\/openvpn<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/governmentpaas\/s3-resource\">governmentpaas\/s3-resource<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/phpmyadmin\/phpmyadmin\">phpmyadmin\/phpmyadmin<\/a><\/noindex>, <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/mesosphere\/aws-cli\">mesosphere\/aws-cli<\/a><\/noindex> en <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/hashicorp\/terraform\">hashicorp\/terraform<\/a><\/noindex>, die gezamenlijk meer dan 10 miljoen downloads hebben. Ook zijn er opvallende containers<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/govuk\/gemstash-alpine\">govuk\/gemstash-alpine<\/a><\/noindex> (500 duizend),  <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/monsantoco\/logstash\">monsantoco\/logstash<\/a><\/noindex> (5 miljoen),<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/avhost\/docker-matrix-riot\">avhost\/docker-matrix-riot<\/a><\/noindex> (1 miljoen),<br \/>\n<noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/azuresdk\/azure-cli-python\">azuresdk\/azure-cli-python<\/a><\/noindex> (5 miljoen)<br \/>\nen <noindex><a rel=\"nofollow\" href=\"https:\/\/hub.docker.com\/r\/ciscocloud\/haproxy-consul\">ciscocloud\/haproxy-consul<\/a><\/noindex> (1 miljoen). Bijna al deze containers zijn gebaseerd op Alpine en maken geen gebruik van de pakketten shadow en linux-pam. Slechts \u00e9\u00e9n uitzondering is microsoft\/azure-cli, dat is gebaseerd op Debian.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"link\"><\/a><\/noindex><\/p>\n<p>Bron: <a \ncontent=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/www.opennet.ru\/opennews\/art.shtml?num=50716\">opennet.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0414\u0436\u0435\u0440\u0440\u0438 \u0413\u0430\u043c\u0431\u043b\u0438\u043d (Jerry Gamblin) \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u0430 Alpine, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u0430\u044f \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u043f\u0430\u0440\u043e\u043b\u044f \u0434\u043b\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f root. \u0410\u043d\u0430\u043b\u0438\u0437 \u0442\u044b\u0441\u044f\u0447\u0438 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 \u0438\u0437 \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0430 Docker Hub \u043f\u043e\u043a\u0430\u0437\u0430\u043b, \u0447\u0442\u043e \u0432 194 \u0438\u0437 \u043d\u0438\u0445 (19.4%) \u0434\u043b\u044f root \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c \u0431\u0435\u0437 \u0431\u043b\u043e\u043a\u0438\u0440\u043e\u0432\u043a\u0438 \u0443\u0447\u0451\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 (&#171;root:::0:::::&#187; \u0432\u043c\u0435\u0441\u0442\u043e &#171;root:!::0:::::&#187;). \u0412 \u0441\u043b\u0443\u0447\u0430\u0435 \u043f\u0440\u0438\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-34143","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0414\u0436\u0435\u0440\u0440\u0438 \u0413\u0430\u043c\u0431\u043b\u0438\u043d (Jerry Gamblin) \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/nl\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"nl_NL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd4719.4% \u0438\u0437 1000 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Docker \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c root | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0414\u0436\u0435\u0440\u0440\u0438 \u0413\u0430\u043c\u0431\u043b\u0438\u043d (Jerry Gamblin) \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/nl\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T18:56:37+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T18:56:37+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd4719,4% van de 1000 populairste Docker-containers bevat een leeg root-wachtwoord | ProHoster","description":"Jerry Gamblin besloot te onderzoeken hoe wijdverbreid het onlangs ontdekte probleem is in Docker-images.","canonical_url":"https:\/\/prohoster.info\/nl\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"nl_NL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd4719.4% \u0438\u0437 1000 \u0441\u0430\u043c\u044b\u0445 \u043f\u043e\u043f\u0443\u043b\u044f\u0440\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0435\u0439\u043d\u0435\u0440\u043e\u0432 Docker \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0442 \u043f\u0443\u0441\u0442\u043e\u0439 \u043f\u0430\u0440\u043e\u043b\u044c root | ProHoster","og:description":"\u0414\u0436\u0435\u0440\u0440\u0438 \u0413\u0430\u043c\u0431\u043b\u0438\u043d (Jerry Gamblin) \u0440\u0435\u0448\u0438\u043b \u0432\u044b\u044f\u0441\u043d\u0438\u0442\u044c \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430 \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432 Docker-\u043e\u0431\u0440\u0430\u0437\u0430\u0445.","og:url":"https:\/\/prohoster.info\/nl\/blog\/news\/19-4-iz-1000-samyh-populyarnyh-kontejnerov-docker-soderzhat-pustoj-parol-root","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:56:37+00:00","article:modified_time":"2019-10-31T18:56:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"34143","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-21 18:05:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 23:13:07","updated":"2026-01-21 18:05:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/34143","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/comments?post=34143"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/posts\/34143\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/media?parent=34143"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/categories?post=34143"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/nl\/wp-json\/wp\/v2\/tags?post=34143"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}