Summary
A vulnerability was discovered in Cloud SQL for SQL Server
that allowed customer administrator accounts to create triggers
in the tempdb database and use those to gain sysadmin privileges in the instance.
The sysadmin privileges would give the attacker access to system databases
and partial access to the machine running that SQL Server instance.
Affected Services
Cloud SQL
Remediation
None required
Tracked CVEs
No tracked CVEs
References
https://cloud.google.com/support/bulletins#GCP-2023-007https://cloud.google.com/sql/docs/security-bulletins#gcp-2023-007
Contributed by https://github.com/ramimac
Disclosure Date
-
Exploitablity Period
-
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
-
