Which of the following security issues is most critical to address in a container image according to the Image Assessment report from CrowdStrike?

Question

Options

• AHigh-severity CVE vulnerabilities in system libraries
• BDeprecated or unused packages in the image
• CMissing comments in the Dockerfile
• DDetected hardcoded credentials for a development database

• A
  79% (26)
• B
  6% (2)
• C
  12% (4)
• D
  3% (1)

Explanation

Option A: High-severity Common Vulnerabilities and Exposures (CVEs) indicate critical security risks, such as the ability to execute arbitrary code, privilege escalation, or data exfiltration. System libraries are fundamental to the container's operation, and their vulnerabilities can be exploited to compromise the entire container or host. Addressing these vulnerabilities is crucial to prevent exploitation. Option B: Deprecated or unused packages can increase the attack surface but are not as immediately critical as high-severity CVEs. These can be removed to streamline the image but do not represent an active threat unless they contain exploitable vulnerabilities. Option C: Comments in a Dockerfile improve maintainability and readability but have no bearing on the security of the image itself. This is a best practice for developers, not a critical security Option D: While hardcoded credentials are a significant security concern, they typically represent an issue of configuration or secret management rather than a systemic vulnerability in the image. They may also be environment-specific, making them less critical than systemic vulnerabilities like CVEs in system libraries.

No community discussion yet for this question.