security1 publisher
Arc Security read 43 other AWS accounts' Athena queries by moving one word out of the SQL
Athena blocked the system catalog when it appeared in the query text and resolved it anyway when the same name arrived in QueryExecutionContext. AWS closed the gap in four days. One writeup is the only account of it.
Publishers:act.security
Reality
- Evidence58
- Adoption65
- Hype gap+10
- Incentives60
- Confidence55