How we broke the cloud with two lines of code: the full story of ChaosDB
ID: e9c4b1b6-4877-5014-b81a-2d35411b36c1
STIX ID: report--e9c4b1b6-4877-5014-b81a-2d35411b36c1
Feed Name: Wiz Blog
Threat Score
Wiz Research disclosed "ChaosDB," a severe chain of misconfigurations in Azure Cosmos DB's Jupyter Notebook feature that enabled privilege escalation and retrieval of internal secrets and tokens, giving researchers admin access to Service Fabric management panels and exposing thousands of customers' databases; Microsoft mitigated the issue within 48 hours and Wiz published technical and mitigation details.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.
