Wednesday, May 27, 2020

API Security Weekly: Issue #85

Vulnerability: Google Cloud Deployment Manager

Google Cloud Deployment Manager is an infrastructure management service that makes it simple to create, deploy, and manage Google Cloud Platform resources. Ezequiel Pereira found an API vulnerability in Google Cloud Deployment Manager and collected his $31K prize from Google as result.

Pereira found a way to make it invoke Google internal APIs that he was not supposed to invoke:



from DZone.com Feed https://ift.tt/3dam3hN

No comments:

Post a Comment