services / Google Cloud / Cloud Monitoring Notification Channels

A destination, such as email, Slack, or PagerDuty, that receives alert notifications.

monitoring.​notificationChannels.​getVerificationCode

Returns a code for an already-verified channel that verify() will also accept on a different channel. Combined with create and verify, this bypasses the out-of-band ownership proof verification exists to enforce, letting an attacker stand up a verified channel of their own.

Risks

1. Defense destruction (EVASION)

Scope: MEDIUM

This privilege may grant access to confidential data, or its exploit can incur operational cost.

Links