Dockerfile APT package manager is configured to allow unauthenticated packages misconfiguration dete

Rule Details

Cortex AppSec Rule ID	APPSEC2_DOCKER_8
Category - Subcategory	Public Exposure - Encryption And Protocols
Provider	OTHER
Severity	MEDIUM
Framework	DOCKER

Impact

Utilizing the --allow-unauthenticated or --force-yes option with the APT package manager (apt-get) in Dockerfiles poses a security concern. These flags allow the installation of packages without verifying their authenticity, effectively bypassing the signature verification process.

Without proper signature verification, there's a heightened risk of installing tampered or malicious packages. This can introduce vulnerabilities or malicious software into your Docker images, potentially compromising the container's security and the integrity of applications running within.

How to Fix

[source,go]

• RUN apt-get update && apt-get install -y --allow-unauthenticated somepackage

• RUN apt-get update && apt-get install -y somepackage

---