Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Kubernetes
>
General
>
Ensure Authorization Mode Argument Set Alwaysallow
HIGH
Source
Trivy
ID
AVD-KCV-0080
Ensure that the –authorization-mode argument is not set to AlwaysAllow
Do not allow all requests. Enable explicit authorization.
Impact
Links
https://www.cisecurity.org/benchmark/kubernetes
Aqua Container Security