Description

By default, all network traffic is allowed between containers on the same host on the default network bridge.

• 

  Recommended Mitigation

  Edit the Docker daemon configuration file to ensure that icc is disabled. It should include the following setting: 'icc: false'. Alternatively, run the docker daemon directly and pass '--icc=false' as an argument. For Example: 'dockerd --icc=false'