Incorrect Permission Assignment for Critical Resource
| Property | |
|---|---|
| Language |  |
| Severity |  |
| CWE | CWE-732: Incorrect Permission Assignment for Critical Resource |
| OWASP | A05:2021 - Security Misconfiguration |
| Confidence Level | Low |
| Impact Level | Medium |
| Likelihood Level | Low |
Description#
The container is configured with a writable root filesystem, which means applications inside the container can change or add files. This increases the risk of malicious code being downloaded or critical files being modified during runtime.
Impact#
If exploited, attackers could write or replace files in the container, potentially installing malware, creating backdoors, or tampering with application code and data. This can lead to data breaches, unauthorized access, or the compromise of other systems connected to the container.