TF 0381 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki
Runs with UID <= 10000
Property | Value |
---|---|
Language | |
Severity |
Description
Containers are configured to run with a user ID (UID) of 10,000 or lower, or do not explicitly set a UID. This can cause conflicts with system users on the host, increasing the risk of privilege escalation or unintended access.
Impact
If exploited, attackers could leverage predictable or low-numbered UIDs to gain elevated privileges or interact with sensitive host resources, potentially compromising container isolation and system security.
Resolution
Set 'containers[].securityContext.runAsUser' to an integer > 10000.