Azue Health privilege escalation via SSRF

Brandon Evans, Eric Johnson

Microsoft Defender for Cloud at one point provided customers with a flawed configuration template through their public GitHub repository. This template creates resources in the customer's AWS account so that Microsoft Defender for Cloud can scan it. In the rare cases in which this template was deployed, under certain, limited circumstances, Defender for Cloud's security findings for these AWS accounts could be disclosed to unauthorized third parties.


Unauthorized Access to AWS Account Findings in Microsoft Defender for Cloud

Kat Traxler

GCP administrators face challenges in managing HMAC keys within their organizations, 
lacking visibility into which user accounts have generated these keys and whether they are 
actively being used to access storage objects. Additionally, there's a lack of functionality 
to revoke keys associated with other users, restricting their ability to enforce security 
policies effectively. Similarly, GCP incident response teams rely on Cloud Logging to monitor
Cloud Storage object access, but they lack specific indicators to determine if HMAC keys are
being utilized in these access attempts.


Copilot Studio information disclosure via SSRF

Summary

Affected Services

Tracked CVEs

References

More vulnerabilities...

Azue Health privilege escalation via SSRF

Tenable

Unauthorized Access to AWS Account Findings in Microsoft Defender for Cloud

Brandon Evans, Eric Johnson

GCP HMAC Keys are not discoverable or revokable other than for self

Kat Traxler, Vectra AI