services / Google Cloud / Cloud Storage buckets

Buckets are the basic unit of data storage within Cloud Storage. All data must be contained in a bucket.

Buckets may be used to store data of various sensitivities, from publicly available data to very sensitive confidential data.

storage.​buckets.​createTagBinding

A common use case of tag bindings is for use in IAM policy conditions. If the user has any policies that use tag bindings to enforce conditions, creating a tag on a resource allows them to escalate their access to that resource. Also requires getIamPolicy or knowledge of the IAM policy from some other means.

Risks

1. Privilege escalation (CRITICAL)
2. Denial-of-access (EVASION)

Scope: CRITICAL

This privilege may grant access to sensitive data from a significant fraction of organizational functions, allow interruption of critical organizational services, or its exploit could lead to significant privilege escalation.

Links