The official Express Gateway Docker images before 1.14.0 contain a blank password for a root user. Systems using the Express Gateway Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Express-gateway_docker_image | Express-gateway | * | 1.14.0 (excluding) |