CVE-2020-35190

Name of the Vulnerable Software and Affected Versions plone versions prior to 4.3.18-alpine

Description The issue concerns a blank password for a root user in the official plone Docker images. This could allow a remote attacker to achieve root access with a blank password, potentially affecting systems that use the plone docker container deployed by affected versions of the docker image.

Recommendations For versions prior to 4.3.18-alpine, update to version 4.3.18-alpine or later to resolve the issue. As a temporary workaround, consider changing the root password to a secure value until the update can be applied. Restrict access to the plone docker container to minimize the risk of exploitation.