Microsoft Cloud

Microsoft mitigated a security flaw affecting Azure Synapse and Azure Data Factory that could lead to

Any malicious actor could have weaponized the bug to acquire the Azure Data Factory service certificate and access another tenant's Integration Runtimes to gain access to sensitive information.

However, no evidence of misuse or malicious activity associated with the vulnerability in the wild was reported yet.

Source: https://thehackernews.com/2022/05/microsoft-mitigates-rce-vulnerability.html

TPRM report: https://scoringcyber.rankiteo.com/company/microsoft-cloud-platform

"id": "mic113613522",
"linkid": "microsoft-cloud-platform",
"type": "Vulnerability",
"date": "05/2022",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'industry': 'Technology',
                        'location': 'Global',
                        'name': 'Microsoft',
                        'size': 'Large',
                        'type': 'Corporation'}],
 'attack_vector': 'Exploiting a vulnerability to acquire service certificate '
                  'and access Integration Runtimes',
 'data_breach': {'sensitivity_of_data': 'High',
                 'type_of_data_compromised': ['Sensitive information']},
 'description': 'Microsoft mitigated a security flaw affecting Azure Synapse '
                'and Azure Data Factory that could lead to any malicious actor '
                'acquiring the Azure Data Factory service certificate and '
                "accessing another tenant's Integration Runtimes to gain "
                'access to sensitive information. No evidence of misuse or '
                'malicious activity associated with the vulnerability in the '
                'wild was reported yet.',
 'impact': {'data_compromised': ['Sensitive information in Integration '
                                 'Runtimes'],
            'systems_affected': ['Azure Synapse', 'Azure Data Factory']},
 'initial_access_broker': {'entry_point': 'Azure Data Factory service '
                                          'certificate',
                           'high_value_targets': 'Sensitive information in '
                                                 'Integration Runtimes'},
 'investigation_status': 'No evidence of misuse or malicious activity reported',
 'motivation': 'Unauthorized access to sensitive information',
 'post_incident_analysis': {'corrective_actions': 'Mitigated the security flaw',
                            'root_causes': 'Vulnerability in Azure Data '
                                           'Factory service certificate'},
 'response': {'remediation_measures': ['Mitigated the security flaw']},
 'title': 'Microsoft Azure Synapse and Azure Data Factory Security Flaw',
 'type': 'Security Flaw',
 'vulnerability_exploited': 'Azure Data Factory service certificate '
                            'vulnerability'}