The official znc docker images before 1.7.1-slim contain a blank password for a root user. Systems using the znc docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access with a blank password.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Znc_docker_image | Znc | 1.6 (including) | 1.6 (including) |
| Znc_docker_image | Znc | 1.6-slim (including) | 1.6-slim (including) |
| Znc_docker_image | Znc | 1.6.4 (including) | 1.6.4 (including) |
| Znc_docker_image | Znc | 1.6.4-slim (including) | 1.6.4-slim (including) |
| Znc_docker_image | Znc | 1.6.5 (including) | 1.6.5 (including) |
| Znc_docker_image | Znc | 1.6.5-slim (including) | 1.6.5-slim (including) |
| Znc_docker_image | Znc | 1.6.6 (including) | 1.6.6 (including) |
| Znc_docker_image | Znc | 1.6.6-slim (including) | 1.6.6-slim (including) |
| Znc_docker_image | Znc | 1.7.0 (including) | 1.7.0 (including) |
| Znc_docker_image | Znc | 1.7.0-slim (including) | 1.7.0-slim (including) |
| Znc_docker_image | Znc | 1.7.1-slim (including) | 1.7.1-slim (including) |