wiz.io/blog· Aug 29, 2021· by Alon Schindel

ChaosDB: How to discover your vulnerable Azure Cosmos DBs and protect them

Open Original Article ↗
Wiz Research found an unprecedented critical vulnerability in Azure Cosmos DB. The vulnerability gives any Azure user full admin access (read, write, delete) to another customers Cosmos DB instances without authorization.
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.