Nathan Eddy / Dark Reading:

Researchers describe now-fixed vulnerabilities in Microsoft's Azure Health Bot Service that allowed a user to access and manage other customers' resources  —  Multiple privilege escalation issues in Microsoft Azure's cloud-based Health Bot service opened the platform to server-side request forgery …

Nathan Eddy / Dark Reading:

Researchers describe now-fixed vulnerabilities in Microsoft's Azure Health Bot Service that allowed a user to access and manage other customers' resources  —  Multiple privilege escalation issues in Microsoft Azure's cloud-based Health Bot service opened the platform to server-side request forgery …

Source: TechMeme
Source Link: http://www.techmeme.com/240813/p39#a240813p39