ChaosDB: Infosec bods could pull anyone’s plaintext Azure Cosmos DB keys at will from Microsoft admin tools

And they had a wildcard cert too. Still feeling secure? Black Hat Europe  An astonishing piece of vulnerability probing gave infosec researchers a way into to Microsoft’s management controls for Azure Cosmos DB – with full read and write privileges over customer databases.……
Read More