Back to Database
Status published
Critical
CVE-2020-29578
The official piwik Docker images before fpm-alpine (Alpine specific) contain...
Vulnerability Description
The official piwik Docker images before fpm-alpine (Alpine specific) contain a blank password for a root user. Systems using the Piwik Docker container deployed by affected versions of the Docker image may allow an remote attacker to achieve root access.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-29578
Credits & Attribution
No credits recorded in the NVD database.
More from matomo
View All →CVE-2022-33156
The matomo_integration (aka Matomo Integration) extension before 1.3.2 for TYPO3...
Medium
6.1
CVE-2019-12215
A full path disclosure vulnerability was discovered in Matomo v3.9.1...
Medium
4.3
CVE-2015-7816
The DisplayTopKeywords function in plugins/Referrers/Controller.php in Piwik before 2.15.0 allows...
High
7.5
CVE-2015-7815
Directory traversal vulnerability in core/ViewDataTable/Factory.php in Piwik before 2.15.0 allows...
High
7.5
CVE-2013-2633
Piwik before 1.11 accepts input from a POST request instead...
Medium
5
Affected Vendor
matomo
View all reports →Affected Software
piwik fpm-alpine docker image
Vulnerable Versions:
3, 3.5, 3.5.1, 3.6, 3.6.0
Timeline
Official Publish:
December 8th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.