203 - Pentaho Pre-Auth RCE and Theft by CAN Injection [Bug Bounty Podcast]

Some fun issues this week as we explore code execution in Synthetics Recorder stemming from a comment in the code. An auth bypass in Pentaho leading to RCE via SSTI, car theft via CAN bus message injection, and how to become a cluster admin from a compromised pod in AWK Elastic Kubernetes Service.

Links and vulnerability summaries for this episode are available at: https://dayzerosec.com/podcast/203.html

[00:00:00] Introduction
[00:00:30] [Elastic] Synthetics Recorder: Code injection when recording website with malicious content
[00:02:45] [Elastic] …

analytics auth bounty bug bug bounty bus business business analytics bypass can bus car car theft cluster code code execution code injection compromised elastic fun injection introduction kubernetes malicious message pentaho podcast rce recording service ssti theft website