Details

https://docs.docker.com/registry/insecure/

Solution

Do not use any insecure registries.

For example, do not start the Docker daemon as below-
docker daemon –insecure-registry 10.1.0.0/16
Impact-
None.
Default Value-
By default, Docker assumes all, but local, registries are secure.

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/516

This security hardening control applies to the following category of controls within NIST 800-53: System and Information Integrity.This control applies to the following type of system Unix.

References

• 800-53|SI-7(6)

Source

• Tenable.com/audits