Docker集装箱的新缺陷让黑客获得未经授权的进入权 并提升了特权 A new flaw in Docker containers lets hackers gain unauthorized access and escalate privileges.

在集装箱化应用中发现了一个称为“DockerGate”的新的安全漏洞,由于集装箱配置过于宽松,使系统有可能未经授权进入。 A new security flaw dubbed "DockerGate" has been identified in containerized applications, exposing systems to unauthorized access due to overly permissive container configurations. 研究人员利用静态分析工具探测多克档案中的危险许可设置和数千个公共储存库的运行时配置。 Researchers used static analysis tools to detect risky permission settings in Dockerfiles and runtime configurations across thousands of public repositories. 这种脆弱性使攻击者能够增加特权和获得东道系统资源。 The vulnerability allows attackers to escalate privileges and access host system resources. 敦促开发商对其集装箱安装进行审计,并采取更严格的违约政策以减少风险。 Developers are urged to audit their container setups and adopt stricter default policies to mitigate risks.