May 9, 2022, midnight |

The Open Cloud Vulnerability & Security Issue Database www.cloudvulndb.org

Azure Synapse Analytics and Azure Data Factory were vulnerable to cross-tenant access and code execution.
This was made possible via a combination of (1) a shell injection RCE vulnerability in the integration runtime,
(2) credentials for multiple customers stored on a shared host and (3) an insecure management server API.

synlapse

Sr. Product Manager

@ MixMode | Remote, US

Information Security Engineers

@ D. E. Shaw Research | New York City

Technology Security Analyst

@ Halton Region | Oakville, Ontario, Canada

Senior Cyber Security Analyst

@ Valley Water | San Jose, CA

Associate Product Security Engineer

@ Humana | USA - Berkeley, MO

Cyberspace Capability Developer

@ SNC-Lavalin | MA105: BBN Headquarters 10 Moulton Street , Cambridge, MA, 02138 USA