BrokenSesame

ApsaraDB and AnalyticDB contained several vulnerabilities in their PostgreSQL offerings
which ultimately allowed unauthorized access to other tenants' databases and the ability
to perform a supply-chain attack on both services, which in turn would have allowed remote
code execution (RCE) as well. Both services implemented multi-tenancy through a shared K8s
cluster, but contained several bugs related to tenant isolation which an attacker could
chain together to achieve the above impact. In ApsaraDB, these included privilege escalation
to root in a …

access attack bugs cluster code code execution container container escape databases escalation escape impact isolation k8s namespace nodes permissions postgresql privilege privilege escalation rce remote code remote code execution root services supply turn unauthorized access vulnerabilities