🔷 Agent Exposes Azure Customers To Unauthorized Code Execution

Azure customers on Linux machines - which account for over half of all Azure instances according to Microsoft - are at risk if they use any of the services relying on OMI (Open Management Infrastructure), a Windows Management Infrastructure (WMI) for UNIX/Linux systems. The RCE is the simplest RCE you can ever imagine: simply remove the auth header and you are root. This Twitter thread is also useful to understand the impact of this flaw.

https://www.wiz.io/blog/secret-agent-exposes-azure-customers-to-unauthorized-code-execution

#azure