writeups.xyz / I Own your Cloud Shell: Taking over “Azure Cloud Shell” Kubernetes Cluster Through Unsecured Kubelet API 30,000$ Bounty

Submitter : c2a

Date: 15 February 2021

Bounty : 30,000

Vulnerabilities :

• Privilege Escalation
• RCE

Programs :

• Microsoft

Authors :

• Chen Cohen (@Chencococococo)

Link :
https://hencohen10.medium.com/i-own-your-cloud-shell-taking-over-azure-cloud-shell-kubernetes-cluster-through-unsecured-558621519cf9