CVE-2020-35185

Name of the Vulnerable Software and Affected Versions Ghost Docker images versions prior to 2.16.1-alpine

Description The issue concerns a blank password for a root user in the official Ghost Docker images. This could allow a remote attacker to gain root access to systems using the affected Docker container.

Recommendations For Ghost Docker images versions prior to 2.16.1-alpine, update to version 2.16.1-alpine or later to resolve the issue. As a temporary workaround, consider changing the root password to a secure value until the update can be applied. Restrict access to the Docker container to minimize the risk of exploitation.