ドイツのアーヘン工科大学の研究者がDocker Hubで公開されているコンテナイメージなどを分析した結果、秘密鍵やAPIの機密情報が含まれているものが数千存在していた。

Thousands of images on Docker Hub leak auth secrets, private keys

July 16, 2023
Researchers at the RWTH Aachen University in Germany published a study revealing that tens of thousands of container images hosted on Docker Hub contain confidential secrets, exposing software, online platforms, and users to a massive attack surface.

Docker Hub is a cloud-based repository for the Docker community to store, share, and distribute Docker images. These container-creation templates include all of the necessary software code, runtime, libraries, environment variables, and configuration files to easily deploy an application in Docker.

Thousands of images on Docker Hub leak auth secrets, private keys
第三世代のウィルス対策
Nash
DeepInstinct
webサイト脆弱性診断
セキュリティポリシー
jyrosecurity (3)
Nash (4)
DeepInstinct
previous arrowprevious arrow
next arrownext arrow
Shadow