Google patched 'LeakyLooker' flaws

Why it matters

The 'LeakyLooker' flaws could have allowed unauthorized individuals to gain cross-tenant SQL access across Google Cloud Platform services. The vulnerabilities resided in Google's Looker Studio, a business intelligence and data visualization platform. The issue stemmed from Looker's data connector, which, if exploited, could expose sensitive information across different tenants. Successful exploitation could lead to unauthorized data access and potential data breaches. Google addressed the 'LeakyLooker' vulnerabilities promptly, mitigating the risk of potential exploits. Users are advised to ensure their Looker Studio instances are updated to the latest version to incorporate the patch.

What happens next

• The 'LeakyLooker' flaws could have allowed unauthorized individuals to gain cross-tenant SQL access across Google Cloud Platform services.
• The issue stemmed from Looker's data connector, which, if exploited, could expose sensitive information across different tenants.
• Successful exploitation could lead to unauthorized data access and potential data breaches.

Sources

• Google patched

Quick answers