pentester.land· Dec 1, 2022· by Ronen Shustin (@ronenshh), Shir Tamari (@shirtamari)

Hell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential for unauthorized database access

Open Original Article ↗
Target Program: IBM
🎯 Vulnerability: SQL Injection (SQLi)
💡 Defense Fix: Use Parameterized Prepared Statements (ORM) for all database queries and disable verbose error messages.
#Cloud#SQL injection#Privilege escalation#Information disclosure