Misconfigured Docker on Default Port

One of the most popular, and potentially fatal, mistakes companies make is misconfiguring Docker API ports. An open API port can lead to immediate compromise, which can expose your cloud environment to various threats. Attackers are continuously looking for misconfigured Docker API ports. A single incorrect configuration may give the attacker access to the Docker daemon or the cloud server on the Docker platform.

This gives attackers various abilities such as:

• Check which containers are on the server
• Pull images from Docker hub
• Execute additional commands
• Create and delete containers and container images
• Manage containers

Mitigation / Precaution

• Prevent Docker from creating default gateway

Written by

Febna V M

Cyber Security Engineer