medium

GCP IAP bypass

Published Fri, Sep 17th, 2021

Platforms

gcp

Summary

Convincing a victim to click a specially crafted link would allow the attacker to bypass the Identity-Aware Proxy (a core component of BeyondCorp).

Affected Services

N/A

Remediation

None required

Tracked CVEs

No tracked CVEs

References

https://cloud.google.com/support/bulletins

Contributed by https://github.com/0xdabbad00

Entry Status

Finalized

Disclosure Date

Fri, Sep 17th, 2021

Exploitability Period

-

Known ITW Exploitation

-

Detection Methods

None

Piercing Index Rating

-

Discovered by

Unknown

More vulnerabilities...

medium

Azure privilege escalation via Log Analytics role

azure

Azure AD users could escalate their privileges using the Log Analytics Contributor role to reach the full Subscription Contributor role.

Karl Fosaaen, NetSPI
medium

Org policies bypass

gcp

Allows an attacker with privileges in the account to share resources outside of the account even when an org policy restricts this, thus enabling them to backdoor their access.

Kat Traxler
critical

Azurescape

azure

Cross-account container escape

Yuval Avrahami, Palo Alto
View all