#BrokenSesame: Accidental ‘write’ permissions to private registry allowed potential RCE to Alibaba Cloud Database Services
CYBERSECURITY FEATURED ANALYSIS

#BrokenSesame: Accidental ‘write’ permissions to private registry allowed potential RCE to Alibaba Cloud Database Services

BY

Shir Tamari

SOURCE

Wiz Blog | RSS feed

DATE

READ

1 min read

A container escape vulnerability, combined with accidental ‘write’ permissions to a private registry, opened a backdoor for Wiz Research to access Alibaba Cloud databases and potentially compromise its …

A container escape vulnerability, combined with accidental ‘write’ permissions to a private registry, opened a backdoor for Wiz Research to access Alibaba Cloud databases and potentially compromise its services through a supply-chain attack