CVE-2020-29576

Name of the Vulnerable Software and Affected Versions Eggdrop Docker images versions prior to 1.8.4rc2

Description The issue concerns Eggdrop Docker images that have a blank password set for the root user. This could allow a remote attacker to gain root access to systems using the affected Docker container.

Recommendations For versions prior to 1.8.4rc2, update to version 1.8.4rc2 or later to resolve the issue. As a temporary workaround, consider changing the root password to a secure value until the update can be applied. Restrict access to the Docker container to minimize the risk of exploitation.