Microsoft Copilot Studio SSRF vulnerability exposed sensitive cloud data
Tenable Research discovered a server-side request forgery vulnerability in Microsoft Copilot Studio that could have allowed attackers to access sensitive cloud data and internal infrastructure in a shared multi-tenant environment. Microsoft patched the critical security flaw tracked as CVE-2024-38206.
What happened
Tenable Research discovered a server-side request forgery (SSRF) vulnerability in Microsoft Copilot Studio, tracked as CVE-2024-38206 with a severity score of 8.5. The vulnerability stemmed from improper handling of redirect status codes for user-configurable actions within the application.
An attacker exploiting this flaw could have accessed Azure's Instance Metadata Service (IMDS) to obtain managed identity access tokens, potentially granting access to shared resources such as Cosmos DB containing sensitive information about Copilot Studio internals. The vulnerability existed in a shared environment among customers, creating potential cross-tenant impact.
Reported impact
Had the vulnerability been exploited, threat actors could have exfiltrated sensitive data from vulnerable endpoints and accessed internal infrastructure of Copilot Studio. Attackers could have obtained access tokens for the environment, enabling further access to other shared resources where sensitive information regarding the internals of Copilot Studio are stored.
Index analysis
The vulnerability demonstrates how mistakes can occur when companies rush to release products in rapidly expanding spaces. The SSRF flaw allowed researchers to retrieve managed identity access tokens from the IMDS without requiring information beyond the usage of Copilot Studio to exploit it.
Governance controls
Microsoft patched the critical security bug in Copilot Studio.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.