Summary
Microsoft Defender for Cloud at one point provided customers with a flawed configuration template through their public GitHub repository. This template creates resources in the customer's AWS account so that Microsoft Defender for Cloud can scan it. In the rare cases in which this template was deployed, under certain, limited circumstances, Defender for Cloud's security findings for these AWS accounts could be disclosed to unauthorized third parties.
Affected Services
Microsoft Defender for Cloud
Remediation
None required
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/BrandonE
Entry Status
-
Disclosure Date
Wed, Feb 7th, 2024
Exploitablity Period
Prior to 2024/03/07
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Brandon Evans, Eric Johnson
