When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works.

Microsoft patches security vulnerability allowing data leaks in Azure Container Instances

A couple of weeks ago, security researchers highlighted a major flaw in Azure Cosmos DB that potentially exposed data belonging to several Fortune 500 companies. Although that issue was fixed, Microsoft has today published an advisory about yet another security vulnerability in the Azure Container Instances (ACI) service that could leak customer data across the same clusters.

A screenshot from Microsofts 2017 Build 2017 livestream
A snapshot from Microsoft's Build 2017 presentation

Microsoft says that the flaw in the ACI service was privately reported by security researchers at Palo Alto Networks. The two companies then worked under the guidelines of Coordinated Vulnerability Disclosure (CVD) to patch the issue and inform potentially affected customers.

Although Microsoft didn't go into the technical details, it says that the vulnerability in question could allow a customer to access the data of another customer on the same ACI clusters. The Redmond tech giant does not explain the scale or scope of the security flaw either, and instead, just says that customers who were potentially affected by the "researcher activities" have been notified via Service Health Notifications in the Azure Portal. The company reports that it has found no indication that customer data was accessed by leveraging this flaw, but notifications are being sent out on a cautionary basis.

If you didn't receive a notification, Microsoft says that you have no cause for worry as the issue in question has been patched. However, as a "pre-cautionary" measure, customers have been requested to revoke privileged credentials deployed to the platform prior to August 31, follow ACI security baselines, and configure Azure Service Health Alerts.

Report a problem with article
White Google logo on a purple and blue background
Next Article

Google settles case with a terminated employee over workplace activism

Windows 11 logo white on top of the default Windows 11 wallpaper dark theme
Previous Article

Microsoft: Windows 11 is designed to get the best out of hardware, here's how

Join the conversation!

Login or Sign Up to read and post a comment.

1 Comment - Add comment