Best practicesKubernetes scheduler –profiling argument is not set to false
Platform(s)
Non-platform specific
Compliance Frameworks
CCPA, CPRA, iso_27001_2022, iso_27002_2022, K8s CIS, Mitre ATT&CK, NIST 800-171, NIST 800-190, NIST 800-53, PDPA, UK Cyber Essentials
Description
It was found that the argument --profiling in the Scheduler pod specification file is not set to False. Profiling is used to identify performence bottlenecks. When enabled, the feature can be exploited by a malicious actor to uncover system and program details.
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.