pentester.land· Feb 15, 2021· by Chen Cohen (@chencococococo)💰 Bounty: 30,000

I Own your Cloud Shell: Taking over “Azure Cloud Shell” Kubernetes Cluster Through Unsecured Kubelet API 30,000$ Bounty

Target Program: Microsoft

🎯 Vulnerability: Remote Code Execution (RCE)

💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.

#Privilege escalation#RCE