Microsoft Fixes Azure Automation Service Flaw

Share post:

Microsoft has fixed the AutoWarp vulnerability in Azure Automation service.

Microsoft fixed the problem by blocking access to auth tokens for all sandboxes except those that had legitimate access.

Microsoft confirmed that there is no evidence that AutoWarp was exploited in attacks or that Managed Identities tokens with managed identities were misused.

Microsoft has notified all affected customers of the Azure Automation service and recommended that best security practices be followed.

The vulnerability allows an attacker to steal other Azure customers’ data including the Managed Identities authentication tokens. This is stolen from an internal server that manages the sandboxes of other users.

The vulnerability was discovered by Orca Security’s Cloud Security Researcher Yanir Tsarimi.

According to Tsarimi, affected Azure Automation accounts include those with the Managed Identity feature is enabled by default.

“Automation accounts that use an Automation Hybrid worker for execution and/or Automation Run-Accounts for access to resources were not impacted,” Microsoft said.

For more information, read the original story in BleepingComputer

Featured Tech Jobs


Related articles

China approves Broadcom-VMWare merger, last hurdle is cleared

The long-anticipated merger between Broadcom and virtualization giant VMware has been approved by Chinese regulatory authorities, marking the...

Elon Musk’s X sues Media Matters over report linking ads to extremist content

Elon Musk's X has initiated legal action against the progressive watchdog group Media Matters, in response to an...

OpenAI aggressively pursues Google AI talent with offers up to $10 million

In a bold move to bolster its AI expertise, OpenAI is reportedly offering lucrative compensation packages, potentially worth...

Booths axes self-scan machines for human cashiers

Supermarket chain, Booths is axing almost all of its self-scan machines in favor of human cashiers. The company,...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways