Summary
Tenable Research discovered a privilege escalation flaw that allows a user to escalate privileges to that
of the root user within the context of a Spark VM. They also discovered a separate flaw that allows a user to poison
the hosts file on all nodes in their Spark pool, which would allow an attacker to redirect subsets of traffic and snoop on
services users generally do not have access to.
Affected Services
Synapse Analytics
Remediation
None required
Tracked CVEs
No tracked CVEs
References
https://medium.com/tenable-techblog/microsoft-azure-synapse-pwnalytics-87c99c036291https://www.tenable.com/security/research/tra-2022-19https://www.tenable.com/security/research/tra-2022-20
Contributed by https://github.com/mer-b
Entry Status
Finalized
Disclosure Date
Thu, Mar 10th, 2022
Exploitablity Period
Until June 1st, 2022
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Tenable
