Major vulnerabilities found in Google Looker, putting self-hosted deployments at risk

Tenable Research Identifies Critical ‘LookOut’ Vulnerabilities

Tenable Research has uncovered two critical vulnerabilities, collectively named “LookOut”, in Google Looker, a widely used business intelligence and analytics platform deployed by more than 60,000 organisations across 195 countries. […] The post Tenable Research Identifies Critical ‘LookOut’ Vulnerabilities in Google Looker appeared first on Express Computer.

Tenable reveals Looker flaws risking cross-tenant attacks

Tenable warns unpatched self-hosted Google Looker systems face remote takeover, data theft and cross-tenant cloud attack risks.

Inside LookOut: How Researchers Uncovered a Full Compromise Path in Google Looker

Tenable security researchers have uncovered a pair of previously unknown vulnerabilities in Google Looker that, when chained together, could allow attackers to take complete control of a Looker instance and, in cloud environments, potentially reach across customer boundaries. The flaws were were responsibly disclosed through Google’s Cloud Vulnerability Reward Program, and patched on Google-managed systems. The risk now falls squarely on organiz…

Major vulnerabilities found in Google Looker, putting self-hosted deployments at risk

Researchers at Tenable have disclosed two vulnerabilities, collectively referred to as “LookOut,” affecting Google Looker. Because the business intelligence platform is deployed by more than 60,000 organizations in 195 countries, the flaws could give attackers a path to system takeover or access to sensitive corporate data. The uncovered vulnerabilities The most critical discovery, a RCE chain, allows an attacker to take full control of a Looker…

LookOut: Discovering RCE and Internal Access on Looker (Google Cloud & On-Prem)

Tenable Research discovered a remote code execution (RCE) vulnerability and a database exfiltration flaw in Google Looker. On-prem Looker customers: Patch ASAP.