CVE-2020-29579

Name of the Vulnerable Software and Affected Versions Express Gateway versions prior to 1.14.0

Description The official Express Gateway Docker images contain a blank password for a root user, which may allow a remote attacker to achieve root access. This issue affects systems using the Express Gateway Docker container deployed by affected versions of the Docker image.

Recommendations For versions prior to 1.14.0, update to version 1.14.0 or later to resolve the issue. As a temporary workaround, consider disabling root access to the container until a patch is applied. Restrict access to the container to minimize the risk of exploitation.