CVE-2019-5021 : Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL

Versions of the Official Alpine Linux Docker images (since v3.3) contain a NULL password for the `root` user. This vulnerability appears to be the result of a regression introduced in December of 2015. Due to the nature of this issue, systems deployed using affected versions of the Alpine Linux container which utilize Linux PAM, or some other mechanism which uses the system shadow file as an authentication database, may accept a NULL password for the `root` user.

Published 2019-05-08 17:29:01

Updated 2022-06-13 18:45:09

Source Talos

View at NVD, CVE.org

Products affected by CVE-2019-5021

F5 » Big-ip Controller » Version: 1.2.1 For Cloud Foundry
cpe:2.3:a:f5:big-ip_controller:1.2.1:*:*:*:*:cloud_foundry:*:*
Matching versions
Opensuse » Leap » Version: 15.0
cpe:2.3:o:opensuse:leap:15.0:*:*:*:*:*:*:*
Matching versions
Opensuse » Leap » Version: 15.1
cpe:2.3:o:opensuse:leap:15.1:*:*:*:*:*:*:*
Matching versions
Gliderlabs » Docker-alpine
Versions from including (>=) 3.3
cpe:2.3:a:gliderlabs:docker-alpine:*:*:*:*:*:*:*:*
Matching versions
When used together with: Alpinelinux » Alpine Linux » Version: N/A

Exploit prediction scoring system (EPSS) score for CVE-2019-5021

EPSS FAQ

1.13%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 85 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-5021

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
10.0	HIGH	AV:N/AC:L/Au:N/C:C/I:C/A:C	10.0	10.0	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Complete Integrity Impact: Complete Availability Impact: Complete
9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	Talos
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2019-5021

CWE-258 Empty Password in Configuration File

Using an empty string as a password is insecure.

Assigned by: talos-cna@cisco.com (Secondary)

References for CVE-2019-5021

http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00004.html

[security-announce] openSUSE-SU-2019:1495-1: important: Recommended upda
Mailing List;Third Party Advisory
https://support.f5.com/csp/article/K25551452

Third Party Advisory
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0782

TALOS-2019-0782 || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence
Mitigation;Exploit;Third Party Advisory;Patch
https://security.netapp.com/advisory/ntap-20190510-0001/

CVE-2019-5021 Alpine Linux Docker Image Vulnerability in NetApp Products | NetApp Product Security
Third Party Advisory
https://alpinelinux.org/posts/Docker-image-vulnerability-CVE-2019-5021.html

Docker Image Vulnerability - CVE-2019-5021 | Alpine Linux
Vendor Advisory
http://www.securityfocus.com/bid/108288

Alpine Linux Docker Image CVE-2019-5021 Hard Coded Credentials Authentication Bypass Vulnerability
Broken Link

Jump to

Vulnerability Details : CVE-2019-5021

Products affected by CVE-2019-5021

Exploit prediction scoring system (EPSS) score for CVE-2019-5021

CVSS scores for CVE-2019-5021

CWE ids for CVE-2019-5021

References for CVE-2019-5021