5 ms·

OCI vulnerability allows unauthorized access to customer cloud storage volumes

• __bjoernd 4y ago
  This is not good. Even though they fixed it quickly, there must have been multiple misses for this to be ending up in production.
• agons 4y ago
  OCI = Oracle Cloud Infrastructure (not Open Container Initiative)
• mooreds 4y ago
  tl;dr Until this was fixed, any Oracle Cloud customer could read any other Oracle Cloud customers storage volume simply by having the identifier of the volume. Said identifier could be obtained in several ways (outlined in the article). Issue was fixed promptly after Oracle was notified.
• mac3n 4y ago
  i bet Clay handled this well