writeups.xyz / Securing Databricks cluster init scripts

Submitter : c2a

Date: 2 May 2023

Bounty : undisclosed

Vulnerabilities :

• Privilege Escalation
• Cloud

Programs :

• Databricks

Authors :

• Elia Florio
• Florian Roth (@Cyb3rops)
• Marius Bartholdy

Link :
https://sec-consult.com/blog/detail/securing-databricks-cluster-init-scripts/