Browsing Tag
Cosmos DB
2 posts
Microsoft Fixes CosmosEscape Flaw That Could Allow Any Cosmos DB Takeover
Cybersecurity researchers at Wiz found CosmosEscape in Azure's Gremlin API, exposing a master key that could access any Cosmos DB account. Microsoft fixed it, with no customer impact found.
Whitehat hackers accessed primary keys of Azure’s Cosmos DB customers
The vulnerability existed in Microsoft Azure’s flagship database service Cosmos DB for approximately two years.