This container allows password authentication to the root local user.

[hanyouqing]

The container run with the latest image was reported the vulnerability below

This container allows password authentication to the root local user.

Password authentication is not as secure as SSH certificate authentication, since guessing a password is easier than gaining access to a private key. Therefore, an attacker that knows the root user's credentials can compromise the root user, or guess the password using brute force.