ChaosDB: Infosec bods could pull anyone’s plaintext Azure Cosmos DB keys at will from Microsoft admin tools

This article has been indexed from The Register – Security

And they had a wildcard cert too. Still feeling secure?

Black Hat Europe  An astonishing piece of vulnerability probing gave infosec researchers a way into to Microsoft’s management controls for Azure Cosmos DB – with full read and write privileges over customer databases.…

Read the original article: ChaosDB: Infosec bods could pull anyone’s plaintext Azure Cosmos DB keys at will from Microsoft admin tools