Wednesday, September 22, 2021

Cloud security: Azure CosmosDB

Microsoft Azure cloud vulnerability is the ‘worst you can imagine’ - The Verge

A flaw in Microsoft’s Azure Cosmos DB database product left more than 3,300 Azure customers open to complete unrestricted access by attackers. The vulnerability was introduced in 2019 when Microsoft added a data visualization feature called Jupyter Notebook to Cosmos DB.

Microsoft disabled the vulnerability within 48 hours of Wiz reporting

No comments: