Researchers Disclose Details of Critical ‘CosMiss’ RCE Flaw Affecting Azure Cosmos DB

Share:

Microsoft on Tuesday said it addressed an authentication bypass vulnerability in Jupyter Notebooks for Azure Cosmos DB that enabled full read and write access.

The tech giant said the problem was introduced on August 12, 2022, and rectified worldwide on October 6, 2022, two days after responsible disclosure from Orca Security, which dubbed the flaw CosMiss.

“In short, if an attacker had knowledge of a Notebook’s ‘forwardingId,’ which is the UUID of the Notebook Workspace, they would have had full permissions on the Notebook without having to authenticate, including read and write access, and the ability to modify the file system of the container running the notebook,” researchers Lidor Ben Shitrit and Roee Sagi said.

This container modification could ultimately pave the way for obtaining remote code execution in the Notebook container by overwriting a Python file associated with the Cosmos DB Explorer to spawn a reverse shell.

 

Successful exploitation of the flaw, however, requires that the adversary is in possession of the unique 128-bit forwardingId and that it’s put to use within a one-hour window, after which the temporary Notebook is automatically deleted.

“The vulnerability, even with knowledge of the forwardingId, did not give the ability to execute notebooks, automatically save notebooks in the victim’s (optional) connected GitHub repository, or access to data in the Azure Cosmos DB account,” Redmond said.

Microsoft noted in its own advisory that it identified no evidence of malicious activity, adding no action is required from customers. It also described the issue as “difficult to exploit” owing to the randomness of the 128 bit forwadingID and its limited lifespan.

“Customers not using Jupyter Notebooks (99.8% of Azure Cosmos DB customers do NOT use Jupyter notebooks) were not susceptible to this vulnerability,” it further said.

https://thehackernews.com/2022/11/researchers-disclose-details-of.html?m=1

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
1:22 am, Jul 8, 2025
weather icon 16°C
L: 14° | H: 16°
scattered clouds
Humidity: 70 %
Pressure: 1014 mb
Wind: 2 mph NW
Wind Gust: 3 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 45%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 4:53 am
Sunset: 9:17 pm
DailyHourly
Daily ForecastHourly Forecast
Today 10:00 pm
weather icon
14° | 16°°C 0.34 mm 34% 11 mph 74 % 1019 mb 0 mm/h
Tomorrow 10:00 pm
weather icon
15° | 26°°C 0.2 mm 20% 7 mph 65 % 1022 mb 0 mm/h
Thu Jul 10 10:00 pm
weather icon
19° | 31°°C 0 mm 0% 6 mph 74 % 1023 mb 0 mm/h
Fri Jul 11 10:00 pm
weather icon
20° | 31°°C 0 mm 0% 10 mph 66 % 1022 mb 0 mm/h
Sat Jul 12 10:00 pm
weather icon
19° | 29°°C 0 mm 0% 10 mph 70 % 1020 mb 0 mm/h
Today 4:00 am
weather icon
12° | 14°°C 0.34 mm 34% 11 mph 74 % 1014 mb 0 mm/h
Today 7:00 am
weather icon
13° | 14°°C 0 mm 0% 10 mph 69 % 1015 mb 0 mm/h
Today 10:00 am
weather icon
18° | 18°°C 0 mm 0% 9 mph 47 % 1017 mb 0 mm/h
Today 1:00 pm
weather icon
23° | 23°°C 0 mm 0% 8 mph 33 % 1018 mb 0 mm/h
Today 4:00 pm
weather icon
24° | 24°°C 0 mm 0% 7 mph 29 % 1017 mb 0 mm/h
Today 7:00 pm
weather icon
24° | 24°°C 0 mm 0% 7 mph 29 % 1017 mb 0 mm/h
Today 10:00 pm
weather icon
20° | 20°°C 0 mm 0% 5 mph 41 % 1019 mb 0 mm/h
Tomorrow 1:00 am
weather icon
17° | 17°°C 0 mm 0% 4 mph 54 % 1020 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€92,239.08
-0.88%
Ethereum(ETH)
€2,167.37
-1.11%
Tether(USDT)
€0.85
-0.01%
XRP(XRP)
€1.93
-0.14%
Solana(SOL)
€126.95
-1.86%
USDC(USDC)
€0.85
-0.01%
Dogecoin(DOGE)
€0.143051
-2.33%
Shiba Inu(SHIB)
€0.000010
-1.48%
Pepe(PEPE)
€0.000009
-1.07%
Scroll to Top