Back to directory
WRITEUP #1222

Securing Databricks cluster init scripts

Privilege EscalationCloud
byElia Florio
Program
Databricks
Published
May 2, 2023
Added to HackDex
May 4, 2023
Read Full Writeuphttps://sec-consult.com/blog/detail/securing-databricks-cluster-init-scripts/
▸ RELATED WRITEUPS
Addressed AWS defaults risks: OIDC, Terraform and Anonymous to AdministratorAccess
CloudOIDC
Double Agent: Exploiting Pass-through Authentication Credential Validation in Azure AD
CloudPrivilege escalation
UnOAuthorized: Privilege Elevation Through Microsoft Applications
CloudPrivilege escalation
Escalating Privileges in Google Cloud via Open Groups
CloudPrivilege escalation
ConfusedFunction: A Privilege Escalation Vulnerability Impacting GCP Cloud Functions
CloudPrivilege escalation

Built with ❤️ by Shubham Rawat