logo

How we broke the cloud with two lines of code: the full story of ChaosDB

ID: e9c4b1b6-4877-5014-b81a-2d35411b36c1

STIX ID: report--e9c4b1b6-4877-5014-b81a-2d35411b36c1

Feed Name: Wiz Blog

Threat Score
90/100

Date Published: 2021-11-11

Date Updated: 2026-05-01

...
...

Wiz Research disclosed "ChaosDB," a severe chain of misconfigurations in Azure Cosmos DB's Jupyter Notebook feature that enabled privilege escalation and retrieval of internal secrets and tokens, giving researchers admin access to Service Fabric management panels and exposing thousands of customers' databases; Microsoft mitigated the issue within 48 hours and Wiz published technical and mitigation details.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.