Cockroach Labs cockroach-k8s-request-cert Empty Root Password Authentication Bypass Vulnerability

An authentication bypass vulnerability has been identified in the Cockroach Labs cockroach-k8s-request-cert container image. The issue arises from a blank password for the root user in the system shadow file, allowing remote attackers to bypass authentication. Cockroach Labs has confirmed that this container image is no longer supported.

Impact

Exploitation of this vulnerability allows for authentication bypass, potentially leading to unauthorized access or actions within the system.