high

Control plane bypass in Azure OpenAI

Published Tue, Dec 12th, 2023

Platforms

azure

Summary

A way to manage Azure OpenAI deployments via the Data Plane was discovered, bypassing key security controls. This allows creation/modification/deletion of deployments without the usual protections of Resource Manager Locks, Azure Policy, and Entra ID authentication.

Affected Services

OpenAI

Remediation

Avoid using the Azure AI Developer built-in role. Add the affected OpenAI deployment operations to the NotDataActions section of applicable Role Definitions.

Tracked CVEs

No tracked CVEs

References

https://github.com/tyson-trusthttps://trustoncloud.com/how-i-bypassed-the-control-plane-in-azure-openai/

Contributed by https://github.com/korniko98

Entry Status

Stub (AI-Generated)

Disclosure Date

Tue, Oct 24th, 2023

Exploitability Period

Until 2024/04/02

Known ITW Exploitation

-

Detection Methods

Monitor for unexpected changes to Azure OpenAI deployments, especially those made via the data plane APIs. Review role assignments and custom roles for overly permissive OpenAI permissions.

Piercing Index Rating

-

Discovered by

Tyson Garrett, TrustOnCloud

More vulnerabilities...

high

Google Workspace Domain-Wide Delegation Flaw

gcp

Unit 42 researchers discovered a security risk in Google Workspace's domain-wide delegation feature that allows a GCP identity with necessary permissions to generate access tokens to impersonate Go...

Zohar Zigdon, Unit 42
high

Extracting Managed Identity Credentials from Azure Functions

azure

A vulnerability in Azure Function Apps allowed extraction of Managed Identity credentials from the encrypted startup context of Linux containers. This gave attackers with container access the abili...

Karl Fosaaen, NetSPI
high

CLI Tools Leak Credentials in GitHub Actions Logs

azureawsgcp

Palo Alto discovered that Azure CLI commands were found to leak sensitive credentials and environment variables in GitHub Actions logs. This issue affects both public and private repositories, pote...

Aviad Hahami, Palo Alto Net...
View all