Lesson 2: Image, Registry, Container, and Host Vulnerabilities

Lesson 2: Image, Registry, Container, and Host Vulnerabilities

This lesson covers the main concepts and practical tasks for image, registry, container, and host vulnerabilities.

Topics Covered

• Untrusted images, vulnerable packages, secrets in layers, tags, and registry risks
• Privileged containers, mounted sockets, host paths, excessive capabilities, and weak permissions
• Network exposure, metadata, environment variables, and sensitive application data
• Vulnerability scanning, image review, and configuration assessment
• Controlled vulnerability identification exercise

Lesson Outcome

Learners complete the lesson with a practical understanding of the covered workflow and common troubleshooting steps.