---
title: 'OWASP Docker Top 6 Vulnerability Index'
description: Index of OWASP Docker Security Top 6 vulnerability identifiers, categories, and cross-references
---

# 00 Vulnerability Index

This document provides the index for the OWASP Docker Security Top 6 vulnerabilities.
Each entry includes its identifier, title, and primary category.

## Vulnerability catalog

| ID  | Title                                | Category                 |
|-----|--------------------------------------|--------------------------|
| D01 | Secure User Mapping                  | Privilege Management     |
| D02 | Patch Management Strategy            | Patch Management         |
| D03 | Network Segmentation and Firewalling | Network Security         |
| D04 | Secure Defaults and Hardening        | Configuration Management |
| D05 | Maintain Security Contexts           | Isolation                |
| D07 | Resource Protection                  | Resource Management      |

## Cross-reference matrix

Each vulnerability document follows a consistent structure:

1. Description — what the vulnerability is and how it manifests in Docker container environments.
2. Risk — concrete consequences of exploitation and business impact.
3. Vulnerability checklist — indicators that the environment is exposed.
4. Prevention controls — defensive measures and rectification steps.
5. Example attack scenarios — realistic exploitation narratives.
6. Detection guidance — signals and methods to identify exposure.
7. Remediation — immediate and long-term actions to contain and resolve.

## Category groupings

### Privilege Management

* D01 Secure User Mapping

### Patch Management

* D02 Patch Management Strategy

### Network Security

* D03 Network Segmentation and Firewalling

### Configuration Management

* D04 Secure Defaults and Hardening

### Isolation

* D05 Maintain Security Contexts

### Resource Management

* D07 Resource Protection
