3 ms·
Yeah that's a disaster, many applications/pods/docker containers store secrets in the environment. Even if it doesn't expose the service from the outside due to
by ta45674754 5y ago
Yeah that's a disaster, many applications/pods/docker containers store secrets in the environment. Even if it doesn't expose the service from the outside due to firewalls etc, its a(nother) way in for malicious internal users (which I believe are a large portion of, or the majority of, breaches).
- strenholme 5y agoIndeed. Anything which exposes a program’s environment to other non-root programs which are not sub-processes should be considered a security bug.