A vulnerability named ConfusedFunction has been identified in Google Cloud Platform’s Cloud Functions and Cloud Build services [5] [8] [9], posing a security risk to users.
Description
The vulnerability allows threat actors to escalate privileges to the default Cloud Build service account [1] [3] [5] [8] [9], potentially gaining unauthorized access to other GCP services [4]. This issue stems from excessive permissions granted to the Cloud Build service account, enabling attackers to execute code and access services like Cloud Storage, Artifact Registry [3] [4] [6] [7], and Container Registry [3] [4] [6] [7]. Google has updated the default behavior for accounts created after mid-June 2024 to prevent misuse, but existing instances remain vulnerable [1] [5] [6] [8] [9]. Immediate action is recommended to monitor and mitigate the risk of exploitation.
Conclusion
Organizations using Google Cloud Platform should implement necessary patches and security updates to protect against potential exploits arising from this security flaw [2]. The vulnerability highlights the challenges of software complexity and inter-service communication in cloud environments [1] [6] [7] [8], underscoring the importance of proactive security measures.
References
[1] https://unsafe.sh/go-252250.html
[2] https://www.krofeksecurity.com/uncovering-vulnerability-google-cloud-platform-exposed-to-confusedfunction-threat/
[3] https://www.tenable.com/blog/confusedfunction-a-privilege-escalation-vulnerability-impacting-gcp-cloud-functions
[4] https://www.scmagazine.com/brief/significant-compromise-possible-with-novel-google-cloud-vulnerability
[5] https://www.crn.in/news/tenable-research-discovers-confusedfunction-vulnerability-in-google-cloud-platform/
[6] https://thehackernews.com/2024/07/experts-expose-confusedfunction.html
[7] https://cyber.vumetric.com/security-news/2024/07/25/researchers-reveal-confusedfunction-vulnerability-in-google-cloud-platform/
[8] https://enterprisetimes.in/latest-news/tenable-research-reveal-confusedfunction-vulnerability-in-google-cloud-platform/
[9] https://www.cioandleader.com/tenable-research-discovers-confusedfunction-vulnerability-in-google-cloud-platform/
