4-Year Vulnerability Detected in Microsoft Azure

A 4-year experience in Microsoft Azure, an internet-based data storage service (cloud technology) of Microsoft. security bug detected. The company released its first statement on the subject.

Cloud security company Wiz on Microsoft Azure “NotLegit” discovered a bug called In its first statement on the subject, Microsoft gave information about the source and solution of the problem while warning its customers who may be affected by the vulnerability.

Updated security recommendations

Made by Microsoft’s Security Center, Wiz Coordinated Vulnerability announced that it may encounter a problem that could put the data of its customers at risk. As a result of combining an Azure application with an application configured to serve static content, the company provides access to users’ data. for others to access stated that it is possible. He reported that the fix to resolve the issue was deployed in November, and then customers were notified. He also announced that they will continue to work with customers to secure data at risk.

Microsoft announced that the issue is that App Servise Linux customers deploy applications using Local Git after files have been created or modified in the content root directory. that you are affected explained. He stated that the source of the vulnerability detected is that the system tries to protect currently distributed files as part of the repository contents, enabling what are called in-place distributions by the distribution engine ‘Kudu’. technology company, Security Advice updated its document with an additional section on security of source code. The Wiz research team first reported the issue to Microsoft on October 7th and has since been working with the company to fix it. they are working together expressed. The security company was awarded a $7,500 reward for detecting the bug.