Detections
Analytics

Docker Remote API Detection

critical Nessus Plugin ID 124029

Language:

Synopsis

The Docker API was detected on the remote host.

Description

The Docker service running on the remote host has an exposed remote API. When Docker is configured in this manner an unauthenticated remote attacker could perform administrative Docker commands.

Solution

Configure API access controls.

See Also

https://www.docker.com/

https://docs.docker.com/engine/security/https/

Plugin Details

Severity: Critical

ID: 124029

File Name: docker_remote_api_detection.nbin

Version: 1.71

Type: remote

Published: 4/12/2019

Updated: 4/23/2024

Asset Inventory: true

Supported Sensors: Nessus

Risk Information

CVSS Score Rationale: Unauthenticated administrative access

CVSS v2

Risk Factor: Critical

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: manual

CVSS v3

Risk Factor: Critical

Base Score: 10

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Vulnerability Information

CPE: cpe:/a:docker:docker