It allows you to create and share documents that contain live code, equations, visualizations, and narrative text. Jupyter Notebook is an open-source web application that is directly integrated with your Azure portal and Cosmos DB accounts. The vulnerability has a trivial exploit that doesn't require any previous access to the target environment and impacts thousands of organizations, including numerous Fortune 500 companies.'Īccording to WIZ, all an attacker needs to do is exploit an easy-to-follow chain of vulnerabilities in Cosmos DB's Jupyter Notebook. That's a good thing because according to the cloud security firm, WIZ, which uncovered the ChaosDB security hole, it 'gives any Azure user full admin access (read, write, delete) to another customer's Cosmos DB instances without authorization. Once we became aware of this issue on 12 August 2021, we mitigated the vulnerability immediately.'

This vulnerability was reported to us in confidence by an external security researcher. According to the Microsoft email describing the problem to affected customers, 'Microsoft has recently become aware of a vulnerability in Azure Cosmos DB that could potentially allow a user to gain access to another customer's resources by using the account's primary read-write key.

User azure cosmos db emulator mac