Approved changes feed: RSS · Atom

cpe:2.3:a:express-gateway:express-gateway_docker_image:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorExpress Gateway (4ddbad6e-2ae3-5bc0-aa26-49942aa84f55)
ProductExpress Gateway Docker Image (c7ed1a8c-48eb-56fb-ab09-a1fa0132e037)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/expressgateway/docker-express-gateway purl2cpe 2026-06-01 10:15:35.339884

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-29579 vulnerable 2026-06-08 05:24:58.476374 Details available
The official Express Gateway Docker images before 1.14.0 contain a blank password for a root user. Systems using the Express Gateway Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access.
Published: 2020-12-08T15:05:21.000Z
Updated: 2024-08-04T16:55:10.629Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.