Microsoft Fixes Azure Automation Service Flaw

Share post:

Microsoft has fixed the AutoWarp vulnerability in Azure Automation service.

Microsoft fixed the problem by blocking access to auth tokens for all sandboxes except those that had legitimate access.

Microsoft confirmed that there is no evidence that AutoWarp was exploited in attacks or that Managed Identities tokens with managed identities were misused.

Microsoft has notified all affected customers of the Azure Automation service and recommended that best security practices be followed.

The vulnerability allows an attacker to steal other Azure customers’ data including the Managed Identities authentication tokens. This is stolen from an internal server that manages the sandboxes of other users.

The vulnerability was discovered by Orca Security’s Cloud Security Researcher Yanir Tsarimi.

According to Tsarimi, affected Azure Automation accounts include those with the Managed Identity feature is enabled by default.

“Automation accounts that use an Automation Hybrid worker for execution and/or Automation Run-Accounts for access to resources were not impacted,” Microsoft said.

For more information, read the original story in BleepingComputer

SUBSCRIBE NOW

Related articles

Apple faces backlash over recent ads

Apple is currently facing significant public backlash due to a controversial advertisement featuring a hydraulic press crushing various...

 Google executives face employee concerns amid profitsurge

At a recent all-hands meeting, Google employees voiced significant concerns regarding morale, cost-cutting measures, and the impact of...

Spotify CEO confesses to “rough times after layoffs” – stock price rises

In December, Spotify CEO Daniel Ek announced the largest round of layoffs in the company's history, cutting 1,500...

Zuckerberg shares his vision with investors and Meta stock tanks

In an era where instant gratification is often the norm, Meta CEO Mark Zuckerberg’s strategic pivot towards long-term,...

Become a member

New, Relevant Tech Stories. Our article selection is done by industry professionals. Our writers summarize them to give you the key takeaways