services / Google Cloud / Google Cloud SQL

A Cloud SQL instance is a VM managed by Google that runs the SQL database instance (as well as any accompanying containers)

Cloud SQL is used to store and serve sensitive and application-critical data. Breach of a cloud SQL database can lead to exfiltration of highly sensitive data, or interruption of mission-critical applications.

cloudsql.​instances.​import

Allows importing data to an instance. If enough data is imported to exceed the disk space of the instance, will cause a DOS until the instance is manually resized.

Risks

1. Data manipulation (HIGH)
2. Denial-of-service (HIGH)
3. Infrastructure consumption (LOW)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links