InformationDo not use Docker's default bridge docker0. Use docker's user-defined networks for container networking.
Docker connects virtual interfaces created in the bridge mode to a common bridge called docker0. This default networking model is vulnerable to ARP spoofing and MAC flooding attacks since there is no filtering applied.
NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.
SolutionFollow Docker documentation and setup a user-defined network. Run all the containers in the defined network.
You have to manage the user-defined networks.
By default, docker runs containers on its docker0 bridge.