Summary
An RCE in Google Cloud Deployment Manager could have allowed an attacker to make
requests to internal Google services, authenticated as a privileged service account.
Affected Services
Cloud Deployment Manager
Tracked CVEs
No tracked CVEs
References
Contributed by https://github.com/0xdabbad00
Disclosure Date
Thu, May 7th, 2020
Exploitablity Period
until 2020/05/20
Known ITW Exploitation
-
Detection Methods
-
Piercing Index Rating
-
Discovered by
Ezequiel Pereira
