API Security Weekly: Issue #85

Read the original article: API Security Weekly: Issue #85


Vulnerability: Google Cloud Deployment Manager

Google Cloud Deployment Manager is an infrastructure management service that makes it simple to create, deploy, and manage Google Cloud Platform resources. Ezequiel Pereira found an API vulnerability in Google Cloud Deployment Manager and collected his $31K prize from Google as result.

Pereira found a way to make it invoke Google internal APIs that he was not supposed to invoke:


Read the original article: API Security Weekly: Issue #85