Vault Secrets Exposed: Super User Access Attack Vector #shorts
About this talk
A Vault instance within your environment holds all secrets. An access token allows unauthorized MFA-less access to sensitive Vault paths, leading to critical security breaches. This super user token never expires. #CyberSecurity #InfoSec #Vault #SecretsManagement #BsideFrankfurt #BSidesFRA
Show transcript [en]
You got a vault instance hosted inside of your environment. It's got access to all your secrets. That's what it does. Um and then this access token they find that they can access the vault path uh without MFA of an application account. And now they have now this one's red because this is a this is a super user for this application account, never expires, and they can do anything they want to that application. But wait, there's more.
Related talks
0:38Microsoft Security: Safe PC or Password Risk? #shorts
BSides Frankfurt
0:41IP Geolocation Inaccuracy: Understanding Network Routing #shorts
BSides Frankfurt
0:18Vibe Coding Explained: Simple Rules for Secure Programs #shorts
BSides Frankfurt
0:22Microsoft Shared Folder Error 1272: Security Policy Explained #shorts
BSides Frankfurt
0:25Impossible Game Bot: The Ultimate Training Data Challenge #shorts
BSides Frankfurt
1:22Microsoft Share Error: Security Policies & Honeypot Gold! #shorts
BSides Frankfurt