AutoWarp: Critical Cross-Account Vulnerability in Microsoft Azure Automation Service

This blog was originally published by Orca Security here. Written by Yanir Tsarimi, Orca Security. AutoWarp is a critical vulnerability in the Azure Automation service that allowed unauthorized access to other Azure customer accounts using the service. This attack could mean full control over resources and data belonging to the targeted account, depending on the permissions assigned by the customer.Our research showed that multiple large companies were using the service and could have been ac...

automation autowarp azure critical microsoft microsoft azure service vulnerability