Description

Docker is a computer program that performs operating-system-level virtualization, also known as "containerization".

Docker provides an API for interacting with the Docker daemon (called the Docker Engine API). The Docker Engine API is a RESTful API accessed by an HTTP client such as wget or curl, or the HTTP library which is part of most modern programming languages.

This Docker Engine API is accessible without authentication.

Remediation

Restrict access to the Docker Engine API.

References

Related Vulnerabilities