Horizon Alert
Summary of the vulnerability and why it matters
A security flaw in migration-planner's agent-API could allow an authenticated attacker to bypass tenant isolation, potentially leading to unauthorized data manipulation or corruption across different customer environments.
- Tenant isolation is broken for authenticated users.
- Bypassed isolation impacts data integrity and confidentiality.
- Confirm relevance and exposure in your migration environments.
Attack Path
How an attacker could exploit the issue
An attacker with a valid agent token can bypass security checks within the migration-planner's agent-API. By sending a specially crafted request, they can trick the system into processing data intended for one tenant as if it belonged to another, potentially leading to data corruption or unauthorized access.
- Authenticated attacker.
- Manipulate source ID claim.
- Tenant data compromise.
Live Threat
Current exploitation, exposure, and threat context
An authenticated attacker with a valid agent token could manipulate data across different tenants due to a flaw in the agent-API middleware's JWT validation. This oversight could lead to the collapse of tenant isolation, allowing for unauthorized overwriting of victim inventory, planting of malicious credential URLs, or corruption of migration assessments.
- Tenant inventory and migration data at risk.
- Manipulate `source_id` in JWTs when supported.
- Compromise tenant data integrity and isolation.
Priority actions
Operational Fix
Recommended remediation, mitigation, and detection steps
Real-world remediation is likely driven by platform or infrastructure teams responsible for managing the migration-planner tool, with input from application owners whose tenant data is at risk. The first practical step is to identify all instances of the migration-planner, determine their network exposure, and confirm which are business-critical. Accountable owners must be identified to develop a phased remediation plan based on assessed risk.
- Platform/App owners should own the issue.
- Verify network exposure and critical assets.
- Plan phased remediation based on risk.
