NET_RAW Capabilities Not Being Dropped Security Query With Wrong Severity

[cxMiguelSilva]

The security query is of High severity, however, this configuration does not present a sufficient dangerous impact to be considered HIGH. Some attack scenarios that can be leveraged using this configuration are arp spoofing and DNS cache poisoning, both of which require an initial compromise to the container. As such it is suggested that the severity of this query is downgraded to MEDIUM in Terraform and Kubernetes platforms.

Docs Reference