4 ms·
$40k bounty for complete read access to any customer database using the "public" networking access. Caused by a bad regexp in the authentication mechanism acti
by terom 4y ago
$40k bounty for complete read access to any customer database using the "public" networking access.
Caused by a bad regexp in the authentication mechanism acting as the first security layer, and lack of network-level inter-tenant isolation as a second layer of security.
- eurasiantiger 4y agoI have been recommending clients to steer clear of anything Azure since it became obvious the platform is meant to lock in businesses to a seemingly workable system that eventually fails to force the client to pay for enterprise support.
- mpfundstein 4y agoheavy claim. any evidence for any of that?
- eurasiantiger 4y agoThe documentation is extensive and thorough like a law book, and the UI has several advertisements for premium support.