Microsoft has disclosed details of a vulnerability that researchers at Palo Alto Networks have named “Azurescape” The flaw affects Microsoft’s Azure Container Instances service and “could potentially allow a user to access other customers’ information” Microsoft says the vulnerability has been fixed from its end and does not require any action from the user’s side. As a precautionary measure, Microsoft advises its users to “revoke any privileged credential(s) that were deployed to the platform before Aug. 31″ The vulnerability was first discovered and reported to Microsoft in July.”]
Source: https://www.cuinfosecurity.com/microsoft-alert-serious-flaw-in-azure-container-instances-a-17505

