News for hackers. Stuff that matters.

A comment on Multi-Tenant Architectures. Parent comment

Re:Multi-Tenant Architectures by kevincox on Sunday August 30, 2020 @06:43PM (#24326612)
If you are running a copy of the same software for each tenant anyways it doesn't matter much as a SQL injection for one tenant is most likely available on all tenants.

I think for this use case security is focused on accidentally returning the wrong tenant's data (fully or partially)

[ Parent | on HN ]
Re:Multi-Tenant Architectures by lixtra on Sunday August 30, 2020 @07:41PM (#24326987)
> available on all tenants

Yes, but typically not across tenants. Maybe the flaw is only exploitable to admins of each tenant and they shouldn’t see other tenants data.

I.e. https://news.ycombinator.com/item?id=24216009

[ Parent | on HN ]