pentester.land· Apr 19, 2023· by Ronen Shustin (@ronenshh), Shir Tamari (@shirtamari)

#BrokenSesame: Accidental ‘write’ permissions to private registry allowed potential RCE to Alibaba Cloud Database Services

Open Original Article ↗
Target Program: Alibaba
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.
#Cloud#RCE#Container escape#Kubernetes#Privilege escalation#Lateral movement#Supply chain attack#Cross-tenant vulnerability

More Writeups Like This

pentester.land

Wiz Research finds architecture risks that may compromise AI-as-a-Service providers and consequently risk customer data; works with Hugging Face on mitigations

by Shir Tamari (@shirtamari), Sagi Tzadik (@sagitz_)
pentester.land

Escalating Privileges with Azure Function Apps

by Karl Fosaaen (@kfosaaen)
pentester.land

Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD

by Ilan Kalendarov (@IKalendarov), Elad Beber
pentester.land

SAPwned: SAP AI vulnerabilities expose customers’ cloud environments and private AI artifacts

by Hillai Ben-Sasson (@hillai), Shir Tamari (@shirtamari), Nir Ohfeld (@nirohfeld), Sagi Tzadik (@sagitz_), Ronen Shustin (@ronenshh)