Unnecessary Privilege

Unnecessary privilege happens when the process runs under a high privilege account. In the case of a container running with high privilege account, it can lead to container escapes, privilege escalation, and other security concerns.

Remediation

Make sure the system run with lowest possible privilege.
Remove the 'privileged' option.

Metadata

Severity: medium
Slug: unnecessary-privilege

CWEs

250: Execution with Unnecessary Privileges

OWASP

A05:2021: Security Misconfiguration

Available Labs

Open Container labs in SecDim Play for this vulnerability.

trivial

Privileged.df

Other Trivial Container

Play AppSec WarGames

Want to skill-up in secure coding and AppSec? Try SecDim Wargames to learn how to find, hack and fix security vulnerabilities inspired by real-world incidents.

For Companies Play Now

Got a comment?

Join our secure coding and AppSec community. A discussion board to share and discuss all aspects of secure programming, AppSec, DevSecOps, fuzzing, cloudsec, AIsec code review, and more.