Microsoft claims it has patched three vulnerabilities that may have been exploited to remotely execute commands throughout the Azure cloud Integration Runtimes (IR) compute architecture.

The Azure Data Factory and Synapse pipelines both leverage IR to provide data integration capabilities across a variety of network configurations.

A vulnerability in a third-party Open Database Connectivity (ODBC) driver used to connect to Amazon Redshift was discovered to be vulnerable to remote code execution, according to Microsoft’s alert.

Azure Synapse Pipelines and Data Factory IR both use the ODBC connector.

Attackers might have obtained the Azure Data Factory service certificate and run commands in other cloud tenants’ Data Factory IRs by exploiting the vulnerability.

While an attacker might have used the weakness to remotely execute commands across IR infrastructure without being confined to a specific tenant, the flaw did not affect Azure Synapse as a whole.

Microsoft took various steps to combat the bug, including examining third-party ODBC driver code and collaborating with Amazon on solutions.

On January 4, security firm Orca notified Microsoft of the flaw, and a remedy was released on April 15 in the United States.

Microsoft stated that it is unaware of the exploited vulnerability.