A chain of security vulnerabilities allowed full access to all Azure Cosmos DB databases. Microsoft's Cosmos DB is a NoSQL database in the Azure cloud. Microsoft uses it itself for services such as ...
Wiz found a “Cosmos Master Key” that could unlock every Azure Cosmos DB database. It is patched, and Wiz’s AI bug-hunter helped find it.
Wiz Research disclosed Wednesday that a chain of vulnerabilities in Azure Cosmos DB's Gremlin query engine — which the firm named CosmosEscape — allowed any attacker with a standard Cosmos DB account ...