H3-2021-0010¶

Unauthenticated Docker Engine API Access

Description¶

The Docker Engine API is accessible without authentication.

Impact¶

An attacker could gain full control of all Docker daemon resources and functionality through API access.

References¶

• Protect the Docker daemon socket
• Docker security
• MITRE ATT&CK Technique: T1609: Container Administration Command
• MITRE ATT&CK Technique: T1613: Container and Resource Discovery