TF 0381 - SymbioticSec/Symbiotic-Vulnerability-Database GitHub Wiki

Runs with UID <= 10000

Property Value
Language terraform
Severity low

Description

Containers are configured to run with a user ID (UID) of 10,000 or lower, or do not explicitly set a UID. This can cause conflicts with system users on the host, increasing the risk of privilege escalation or unintended access.

Impact

If exploited, attackers could leverage predictable or low-numbered UIDs to gain elevated privileges or interact with sensitive host resources, potentially compromising container isolation and system security.

Resolution

Set 'containers[].securityContext.runAsUser' to an integer > 10000.