The vulnerability, AttachMe, compromises the security of cloud isolation by allowing threat actors to access other users’ OCI storage volumes without permission, capture and modify sensitive data stored on the volume, and execute code on affected systems. Successfully exploiting the vulnerability requires threat actors to capture the Oracle Cloud Identifier provided to an Oracle Cloud Infrastructure user and insert it into their Oracle Cloud virtual machine. Oracle Cloud infrastructure does not have a security mechanism that checks who owns this identifier. Therefore, threat actors can easily add the identifier to their virtual machines and gain access to the storage units of the Cloud customer that owns the identifier.
Share This:
- Categories
- Latest News
-
CVE-2024-8105: Critical UEFI Vulnerability
-
Email Breach Database Monitoring: Protecting Sensitive Information
-
External Attack Surface Management: Reducing Your Digital Exposure
-
Actively Exploited Two New Zero-Day Vulnerabilities Hit Google Chrome
-
How to Protect High-Profile Individuals with VIP Security
- Follow Us on Social Media!