🎄 Join our Annual Holiday wargame and win prizes!


Unnecessary Privilege

Unnecessary privilege happens when the process runs under a high privilege account. In the case of a container running with high privilege account, it can lead to container escapes, privilege escalation, and other security concerns.

Remediation

  • Make sure the system run with lowest possible privilege.
  • Remove the 'privileged' option.

Metadata

  • Severity: medium
  • Slug: unnecessary-privilege

CWEs

  • 250: Execution with Unnecessary Privileges

OWASP

  • A05:2021: Security Misconfiguration

Available Labs

Select a language to explore available labs for this vulnerability.

No matching labs found

Try adjusting your language filter.

Deco line
Deco line

Play AppSec WarGames

Want to skill-up in secure coding and AppSec? Try SecDim Wargames to learn how to find, hack and fix security vulnerabilities inspired by real-world incidents.

Deco line
Deco line

Got a comment?

Join our secure coding and AppSec community. A discussion board to share and discuss all aspects of secure programming, AppSec, DevSecOps, fuzzing, cloudsec, AIsec code review, and more.

Read more