services / Google Cloud / Compute Engine interconnects

Interconnects provide connectivity between Compute Engine infrastructure and on-premises systems.

Abuse of interconnect resources generally requires the ability to add interconnects as attachments to an already compromised system. For more information see compute.interconnectsAttachments.

compute.​interconnects.​use

When combined with the ability to attach the interconnect, allows network escalation. When further combined with the ability to create an interconnect, may allow for arbitrary connection of the compute VPC to any network.

Risks

1. Network movement (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links