Google patched 'LeakyLooker' flaws
Google patched 'LeakyLooker' vulnerabilities in Looker Studio that allowed unauthorized cross-tenant SQL access across Google Cloud Platform services.
The 'LeakyLooker' flaws could have allowed unauthorized individuals to gain cross-tenant SQL access across Google Cloud Platform services. The vulnerabilities resided in Google's Looker Studio, a business intelligence and data visualization platform. The issue stemmed from Looker's data connector, which, if exploited, could expose sensitive information across different tenants. Successful exploitation could lead to unauthorized data access and potential data breaches. Google addressed the 'LeakyLooker' vulnerabilities promptly, mitigating the risk of potential exploits. Users are advised to ensure their Looker Studio instances are updated to the latest version to incorporate the patch.