EUVD-2017-15264

Malware in sbrugna...

Experts Reveal Google Cloud Platform's Blind Spot for Data Exfiltration Attacks

Malicious actors can take advantage of "insufficient" forensic visibility into Google Cloud Platform GCP to exfiltrate sensitive data, a new research has found. "Unfortunately, GCP does not provide the level of visibility in its storage logs that is needed to allow any effective forensic...

CVE-2017-6199

Sandstorm (build prior to 0.203) is affected by CVE-2017-6199 due to insufficient validation of an email-address field, allowing remote attackers to bypass the Sandstorm organization restriction. The issue is tied to version pre-0.203; upgrading to build 0.203 or later is the documented remediati...

CVE-2017-6199: Improper Authentication

A remote attacker could bypass the Sandstorm organization restriction before build 0.203 via a comma in an email-address field...

PT-2018-8317

Name of the Vulnerable Software and Affected Versions Sandstorm versions prior to 0.203 Description A remote attacker could bypass the organization restriction by using a comma in an email-address field. Recommendations For versions prior to 0.203, update to version 0.203 or later to resolve the...