CosmosEscape: Taking over Every Database in Azure Cosmos DB

Wiz Research details CosmosEscape, a critical vulnerability in Azure Cosmos DB that granted full read/write access to every database. Now fully remediated.
45 points by uvuv 84 days ago www.wiz.io 11 comments

Summary

A serious vulnerability in Azure Cosmos DB, named CosmosEscape, allowed unauthorized full access to all databases. Wiz Research explains how this flaw was identified and subsequently fixed, highlighting the importance of security in cloud databases.

Comments (11 of ) ⌛

Loading more comments... ⌛
Scroll down to load more comments
No comments available.
Type to search HN and engineering blog articles
Press Escape to close  |  ↑↓ to navigate  |  Enter to open