writeups.xyz / Wiz Research discovers "ExtraReplica"— a cross-account database vulnerability in Azure PostgreSQL

Submitter : c2a

Date: 28 April 2022

Bounty : undisclosed

Vulnerabilities :

• Cross-Tenant Vulnerability
• Privilege Escalation
• Authentication Bypass
• Cloud

Programs :

• Microsoft

Authors :

• Shir Tamari (@Shirtamari)
• Ronen Shustin (@Ronenshh)
• Nir Ohfeld (@Nirohfeld)
• Sagi Tzadik (@Sagitz_)

Link :
https://www.wiz.io/blog/wiz-research-discovers-extrareplica-cross-account-database-vulnerability-in-azure-postgresql/