Detections
Analytics

cAdvisor Unauthenticated Access

medium Web App Scanning Plugin ID 114970

Language:

Synopsis

cAdvisor Unauthenticated Access

Description

cAdvisor (short for container Advisor) is an open-source tool developed by Google that provides real-time monitoring and performance analysis of running containers. By default, cAdvisor does not require authentication to access the application. This allows an attacker to access sensitive data.

Solution

Authentication should be enforced to prevent unauthorized access to the cAdvisor interface.

See Also

https://github.com/google/cadvisor

Plugin Details

Severity: Medium

ID: 114970

Type: remote

Published: 9/26/2025

Updated: 9/26/2025

Scan Template: basic, full, pci, scan

Risk Information

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS Score Source: Tenable

CVSS v3

Risk Factor: Medium

Base Score: 5.3

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CVSS Score Source: Tenable

CVSS v4

Risk Factor: Medium

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

CVSS Score Source: Tenable

Reference Information