Aqua Vulnerability Database
Get Demo
Vulnerabilities
Misconfiguration
Runtime Security
Compliance
Kubernetes
>
General
>
Drop Unused Capabilities
LOW
Source
Trivy
ID
AVD-KSV-0004
Default capabilities: some containers do not drop any
Security best practices require containers to run with minimal required capabilities.
Impact
Links
https://kubesec.io/basics/containers-securitycontext-capabilities-drop-index-all/
Aqua Container Security