VDB

GCVE-110-CLOUD-2023-0012

GCVE-110-CLOUD-2023-0012
Advisory Published
Vulnetix · Advisory published November 8, 2023
SafeBreach Labs researchers developed methods to leverage Microsoft Azure's Automation Service for free, undetectable cryptocurrency mining. They found three ways to execute miners: two using their own environment and Azure's resources for free, and one in a victim's environment undetected. The techniques could potentially be used for any task requiring code execution on Azure.

Affected Products

VendorProductVersionsPlatforms
AzureCloud Services
AzureAzure Automation Service

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

$ Console Community · 100/wk Open console ›