S4E just found a medium-severity finding from ge proficy webspace panel detection scanner
PlatformPlansPartners
Resources
ToolsBlogDocs
Sign Up →
medium·Misconfiguration·Updated Dec 16, 2023

Exposed Docker API Scanner

Leaving Docker APIs exposed to the internet could lead to some troubles like data loss, cryptomining, botnet and so on.

Est. Time~5 seconds
Scan TypeSingle Scan
Targetsdomain, ipv4, subdomain
CostFree
2.9k
Times Used
continuous scan runs
4.7k
Continuously Checked
assets under CS
0
Vulnerabilities Found
confirmed findings
References
Detail

By default when you install docker on a host, you can access the docker API only from the loopback interface. This is great but apparently for some reasons you might want to expose those APIs in order to use some external tool like Portainer. Portainer is a lightweight docker management UI, you can run it locally attaching it to the docker socket or you can manage the containers hosted to a remote host.

Solution Advice

If you have an API that doesn't have any authentication mechanism, set an authentication mechanism immediately.

Get AI-powered remediation steps tailored to your asset.

Try AI Solutions →

Check your infrastructure.
Right now.

11,000+ scanners. Free to start. No credit card required.