Cortex CloudApplication Security
Port 22 is exposed misconfiguration detected in code
Rule Details
Cortex AppSec Rule ID
APPSEC_DOCKER_1
Category - Subcategory
Public Exposure - Sensitive Ports
Provider
OTHER
Severity
LOW
Framework
DOCKER
Impact
This rule detects whether port 22 is exposed in Dockerfiles. Exposing port 22 in Docker containers poses security risks by potentially allowing unauthorized users to gain SSH access. Therefore, avoid exposing port 22 and use more secure methods for managing and accessing your containers.
How to Fix
To mitigate this issue, remove any EXPOSE instructions related to port 22. Consider using more secure alternatives to SSH for managing your containers.
Example: [source,go]
EXPOSE 22 + # Do not expose port 22 ...
PreviousAzure AKS cluster HTTP application routing enabled misconfiguration detected in code
NextGCP Firewall rule allows all traffic on SSH port (22) misconfiguration detected in code
Last updated
Was this helpful?
