Default Azure Automation Setting Enables Cross-Tenant Identity Takeover
Dark Reading
·
By Jeffrey Schwartz
·
·
1 views
Microsoft addresses a public-by-default configuration and chain of code flaws in Azure Automation that could have let attackers seize another tenant's identity and access others' data, credentials, and cloud workloads.
Microsoft addresses a public-by-default configuration and chain of code flaws in Azure Automation that could have let attackers seize another tenant's identity and access others' data, credentials, and cloud workloads.