Extreme Flaw in Google Cloud’s Cloud SQL Service Uncovered Confidential Knowledge

Deal Score0
Deal Score0

Could 26, 2023Ravie LakshmananKnowledge Security / Cloud Safety

A brand new safety flaw has been disclosed within the Google Cloud Platform’s (GCP) Cloud SQL service that may very well be probably exploited to acquire entry to confidential knowledge.

“The vulnerability may have enabled a malicious actor to escalate from a primary Cloud SQL person to a full-fledged sysadmin on a container, having access to inside GCP knowledge like secrets and techniques, delicate information, passwords, along with buyer knowledge,” Israeli cloud safety agency Dig said.

Cloud SQL is a fully-managed answer to construct MySQL, PostgreSQL, and SQL Server databases for cloud-based functions.

The multi-stage assault chain recognized by Dig, in a nutshell, leveraged a niche within the cloud platform’s safety layer related to SQL Server to escalate the privileges of a person to that of an administrator function.

The elevated permissions subsequently made it potential to abuse one other important misconfiguration to acquire system administrator rights and take full management of the database server.

Cloud SQL

From there, a menace actor may entry all information hosted on the underlying working system, enumerate information, and extract passwords, which may then act as a launchpad for additional assaults.

“Getting access to inside knowledge like secrets and techniques, URLs, and passwords can result in publicity of cloud suppliers’ knowledge and clients’ delicate knowledge which is a significant safety incident,” Dig researchers Ofir Balassiano and Ofir Shaty stated.


Zero Belief + Deception: Be taught Find out how to Outsmart Attackers!

Uncover how Deception can detect superior threats, cease lateral motion, and improve your Zero Belief technique. Be a part of our insightful webinar!

Save My Seat!

Following accountable disclosure in February 2023, the problem was addressed by Google in April 2023.

The disclosure comes as Google announced the provision of its Computerized Certificates Administration Surroundings (ACME) API for all Google Cloud customers to routinely purchase and renew TLS certificates free of charge.

Discovered this text attention-grabbing? Observe us on Twitter and LinkedIn to learn extra unique content material we put up.

We will be happy to hear your thoughts

Leave a reply

Enable registration in settings - general