Container Misconfiguration
High · Configuration · CWE-16
Description
Privileged containers, root user, exposed sockets.
Root cause
Insecure Dockerfile/K8s spec.
Impact
Container escape, cluster compromise.
Detection
CIS benchmarks; kube-bench.
Mitigation
Non-root, drop caps, read-only root FS.
Secure coding
Scan images and manifests in CI.
Safe lab example
lab-docker
Practise related skills in Labs or deepen on Academy library.