Security News > 2023 > December > Google Workspace Security: DeleFriend Vulnerability Could Allow Unwanted Access to APIs
Cybersecurity researchers from the firm Hunters discovered a vulnerability in Google Workspace that could allow unwanted access to Workspace APIs.
According to the Hunters team, the vulnerability is based on Google Workspace's role in managing user identities across Google Cloud services.
Domain-wide delegation connects identity objects from either Google Workspace Marketplace or a Google Cloud Platform Service Account to Workspace.
Once inside an account with Super Admin privileges, attackers could potentially view emails in Gmail, view someone's schedule in Google Calendar or exfiltrate data from Google Drive.
The end result is a JWT object, which can be exchanged with a temporary access token to allow access to Google APIs.
Figure A. The tool is intended for researchers in order to detect misconfigurations, and "Increase awareness around OAuth delegation attacks in GCP and Google Workspace and to improve the security posture of organizations that use the Domain-Wide-Delegation feature," Hunters wrote.
News URL
https://www.techrepublic.com/article/google-workspace-delefriend-vulnerability/
Related news
- Google Acquires Wiz for $32 Billion in Its Biggest Deal Ever to Boost Cloud Security (source)
- Google to purchase Wiz for $32 billion in cloud security play (source)
- Google Fixed Cloud Run Vulnerability Allowing Unauthorized Image Access via IAM Misuse (source)
- Google Patches Quick Share Vulnerability Enabling Silent File Transfers Without Consent (source)
- Google's got a hot cloud infosec startup, a new unified platform — and its eye on Microsoft's $20B+ security biz (source)
- Google Reports 75 Zero-Days Exploited in 2024 — 44% Targeted Enterprise Security Products (source)
- Perfection is a Myth. Leverage Isn't: How Small Teams Can Secure Their Google Workspace (source)