Lateral movementCloud Function environment variables expose secrets
Platform(s)
Compliance Frameworks
CCPA, coppa, CPRA, Data Security Posture Management (DSPM) Best Practices, iso_27001_2022, iso_27002_2022, Mitre ATT&CK, New Zealand Information Security Manual, NIST 800-53, PDPA, pipeda
Description
GCP Cloud Function is a serverless solution. Environment variables are key-value pairs of data which are forwarded to the execution environment of a function, and help making the behaviour of a generic code that runs in a function more dynamic. We have found that the GCP Cloud Function {GcpCloudFunction} exposes sensitive data in the environment variables of the function. If an attacker can list this function (i.e. read its metadata), they may be able to use this information for lateral movement.
Personalized Demo
See Orca Security in Action
Gain visibility, achieve compliance, and prioritize risks with the Orca Cloud Security Platform.