Administrative access is needed to manage container services on a host. Such access is often realised as services that can be accessed either locally or via a network. Mechanisms for authentication and encryption of the administrative accesses are often present, but not activated by default in all products.
If unauthorised persons can access the network sockets or the host system, they can execute commands via unprotected administrative access points, which can lead to a loss of confidentiality, integrity, and availability in all the containers running on the host.
- BSI -
Copyright by Bundesamt für Sicherheit in der Informationstechnik (https://www.bsi.bund.de/)