SonarQube Docker Images Blank Root Password Vulnerability Allowing Privilege Escalation

A vulnerability exists in official SonarQube Docker images prior to Alpine that allows remote access to the root user with a blank password. This issue arises from the images being deployed with an empty password configuration for the root user, potentially enabling unauthorized users to gain root access on the host system.

Impact

Exploitation of this vulnerability allows for unauthorized root access on the host system where the affected SonarQube Docker container is running.