H3-2021-0010

Unauthenticated Docker Engine API Access

Description

The Docker Engine API is accessible without authentication.

Impact

An attacker could gain full control of all Docker daemon resources and functionality through API access.

References

• Protect the Docker daemon socket
• Docker security
• MITRE ATT&CK Technique: T1609: Container Administration Command
• MITRE ATT&CK Technique: T1613: Container and Resource Discovery