Public Clouds & Shared Responsibility: Lessons from Vulnerability Disclosure

🗓️ 26 Oct 2021 21:22:26Reported by Oliver TavakoliType

threatpost

threatpost🔗 threatpost.com👁 114 Views

Public Cloud Vulnerability Disclosure & Shared Responsibility Mode

Reporter	Title	Published	Views	Family All 336
0day.today	runC < 1.0-rc6 (Docker < 18.09.2) - Host Command Execution Exploit	12 Feb 201900:00	–	zdt
0day.today	runc < 1.0-rc6 (Docker < 18.09.2) - Container Breakout (2)	15 Feb 201900:00	–	zdt
0day.today	Docker Container Escape Exploit	1 Jul 202100:00	–	zdt
IBM Security Bulletins	Security Bulletin: IBM Cloud Private for Data is affected by an issue with runc used by Docker	3 Oct 201922:50	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in Docker affects PowerKVM	17 May 201916:10	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Private is affected by an issue with runc used by Docker	3 Nov 202122:17	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in Kubernetes affects IBM Watson Studio Local	20 Dec 201913:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Functions is affected by a privilege escalation vulnerability in runc	18 Feb 201920:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM API Connect is affected by a critical vulnerability in Kubernetes via runc (CVE-2019-5736)	5 Mar 201917:05	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a privilege escalation vulnerability in runc	18 Feb 201919:10	–	ibm

Source	Link
d1	www.d1.awsstatic.com/security-center/Shared_Responsibility_Model_V2.59d1eccec334b366627e9295b304202faf7b899b.jpg
docs	www.docs.microsoft.com/en-us/azure/security/fundamentals/media/shared-responsibility/shared-responsibility.svg
threatpost	www.threatpost.com/container-security-flaw-runc/141737/
threatpost	www.threatpost.com/azure-cosmos-db-bug-cloud/168986/
threatpost	www.threatpost.com/azure-zero-day-supply-chain/169508/
threatpost	www.threatpost.com/microsite/infosec-insiders-community/

26 Oct 2021 21:22Current

9.1High risk

Vulners AI Score9.1

CVSS 3.18.6

CVSS 29.3

EPSS0.9857

public cloud shared responsibility vulnerability disclosure aws microsoft azure security bugs container-escape vulnerability runc cve-2019-5736 paas azure cosmos db.