CVE-2020-35186

> [Suggested description]
> The official adminer docker images before 4.7.0-fastcgi
> contain a blank password for a root user. System using the adminer
> docker container deployed by affected versions of the docker image may
> allow a remote attacker to achieve root access with a blank password.
> 
> ------------------------------------------
> 
> [Additional Information]
> all versions 4.7.0-fastcgi through 4.2.5-fastcgi are effected.
> 
> ------------------------------------------
> 
> [VulnerabilityType Other]
> Empty Password in Configuration File
> 
> ------------------------------------------
> 
> [Vendor of Product]
> Docker
> 
> ------------------------------------------
> 
> [Affected Product Code Base]
> adminer docker image - 4.7.0-fastcgi
> adminer docker image - 4.2.5-fastcgi
> 
> ------------------------------------------
> 
> [Affected Component]
> /etc/shadow file
> 
> ------------------------------------------
> 
> [Attack Type]
> Remote
> 
> ------------------------------------------
> 
> [Impact Code execution]
> true
> 
> ------------------------------------------
> 
> [Impact Denial of Service]
> true
> 
> ------------------------------------------
> 
> [Impact Escalation of Privileges]
> true
> 
> ------------------------------------------
> 
> [Impact Information Disclosure]
> true
> 
> ------------------------------------------
> 
> [Attack Vectors]
> adminer docker image
> 
> ------------------------------------------
> 
> [Reference]
> https://hub.docker.com/_/adminer
> 
> ------------------------------------------
> 
> [Discoverer]
> koharin

Use CVE-2020-35186.