/
attack_type:privilege_escalation × victim_sectors:"cloud services" × limpar

Resultados

2 casos · pág. 1/1

gbhackers.com · medium

Varonis Threat Labs chains PostgreSQL features to gain OS-level code execution on Snowflake Postgres (fixed server-side)

Varonis Threat Labs disclosed a privilege-escalation chain in Snowflake Postgres that turned a limited, non-superuser role (snowflakeadmin, holding CREATEROLE) into operating-system command execution as the postgres account. The chain abused built-in PostgreSQL behaviors, even though Snowflake had blocked the usual SQL-to-OS routes. Varon…

technology cloud services
hacktron.ai · high

Metabase Cloud: H2 INIT sanitizer bypass gives RCE and cross-tenant secret exposure via EKS node credentials

Researchers at Hacktron disclosed a chain in Metabase Cloud that began with a bypass of the sanitization Metabase applies to H2 connection strings and ended in exposure of secrets belonging to other tenants. Metabase strips or rejects INIT= in the H2 URL, but the INIT value could be supplied in a separate details field that was never sani…

technology cloud services