Batch job runs with privileged flag set to true Affecting Batch service in AWS


Severity

0.0
medium
0
10
Severity Framework
Snyk CCSS
Rule category
IAM/ Accounts Allocation

Is your environment affected by this misconfiguration?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
Frameworks
CSA-CCM
  • Snyk IDSNYK-CC-00276
  • creditSnyk Research Team

Description

Job will have elevated privileges on the host instance which may allow it to access information about other workloads and perform any action on the host.

How to fix?

Remove Properties.ContainerProperties.Privileged attribute or set it to false.

References