6 ms·
Azure's Weakest Link – Full Cross-Tenant Compromise
- hland 1y agoAPI Connections allow anyone to fully compromise any other Connection worldwide, giving full access to the connected Backend. This includes cross-tenant compromise of Key Vaults and Azure SQL databases, as well as any other externally connected service, such as Jira or SalesForce.