Security News > 2023 > December > Google Workspace Security: DeleFriend Vulnerability Could Allow Unwanted Access to APIs
Cybersecurity researchers from the firm Hunters discovered a vulnerability in Google Workspace that could allow unwanted access to Workspace APIs.
According to the Hunters team, the vulnerability is based on Google Workspace's role in managing user identities across Google Cloud services.
Domain-wide delegation connects identity objects from either Google Workspace Marketplace or a Google Cloud Platform Service Account to Workspace.
Once inside an account with Super Admin privileges, attackers could potentially view emails in Gmail, view someone's schedule in Google Calendar or exfiltrate data from Google Drive.
The end result is a JWT object, which can be exchanged with a temporary access token to allow access to Google APIs.
Figure A. The tool is intended for researchers in order to detect misconfigurations, and "Increase awareness around OAuth delegation attacks in GCP and Google Workspace and to improve the security posture of organizations that use the Domain-Wide-Delegation feature," Hunters wrote.
News URL
https://www.techrepublic.com/article/google-workspace-delefriend-vulnerability/
Related news
- New Google Workspace feature prevents sensitive security changes if two admins don’t approve them (source)
- 95% of companies face API security problems (source)
- Security Vulnerability in Saflok’s RFID-Based Keycard Locks (source)
- Google Cloud/Cloud Security Alliance Report: IT and Security Pros Are ‘Cautiously Optimistic’ About AI (source)
- Security Vulnerability of HTML Emails (source)
- Google Workspace rolls out multi-admin approval feature for risky changes (source)
- Fortinet Rolls Out Critical Security Patches for FortiClientLinux Vulnerability (source)
- Google Chrome: Security and UI Tips You Need to Know (source)
- Top 5 Global Cyber Security Trends of 2023, According to Google Report (source)