As cited
Copy frozen at (site build).
vulnerabilities
#BrokenSesame: Accidental ‘write’ permissions to private registry allowed potential RCE to Alibaba Cloud Database Services
Wiz Research discovered a container escape vulnerability paired with overly permissive write access to Alibaba Cloud's private registry, creating a potential supply-chain attack vector that could have led to remote code execution and database compromise. The misconfiguration was identified during security research and highlights risks in container orchestration and registry access controls. Alibaba Cloud addressed the issues after responsible disclosure.
Why it matters: Cloud infrastructure operators and DevOps teams need to audit container escape mitigations and private registry permissions immediately, as this pattern affects production databases and enables supply-chain compromise across dependent services.
- Source published
- First seen by Cybersecurity Tracker