writeups.xyz / Hell’s Keychain: Supply-chain vulnerability in IBM Cloud Databases for PostgreSQL allows potential for unauthorized database access

Submitter : c2a

Date: 1 December 2022

Bounty : undisclosed

Vulnerabilities :

• Cloud
• SQL Injection
• Privilege Escalation
• Information Disclosure

Programs :

• IBM

Authors :

• Ronen Shustin (@Ronenshh)
• Shir Tamari (@Shirtamari)

Link :
https://www.wiz.io/blog/hells-keychain-supply-chain-attack-in-ibm-cloud-databases-for-postgresql