Cloudflare Fixes Flaw That Let One Container Read Another Customer's Leftover Disk Data
-
Cloudflare has addressed a security flaw in Cloudflare Containers that could have allowed a paying customer to read leftover data from other customers' containers on the same server, according to Cloudflare and the researchers who discovered it.
The issue stemmed from disk space that earlier containers had used and then released, not from any active workload. According to Cloudflare, an attacker had no way to select whose data they would receive.
Key points:
- The exposed data came from previously used and relinquished disk space, not live container activity.
- Attackers could not control or target specific victims' data.
- Cloudflare and the reporting researchers disclosed the finding on Thursday.
Source: The Hacker News
Do you think disk space reuse in multi-tenant container platforms deserves more scrutiny from cloud providers?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login