Switching to the root user introduces specific security risks if an attacker gains access to the container. To address this, revert to a non-privileged user after executing the necessary commands as root.

Remediation

Switch back to low privilege user after running commands as 'root'.

Metadata

• Severity: high
• Slug: root-in-container

CWEs

• 269: Improper Privilege Management

OWASP

• A04:2021: Insecure Design