Security Implications Exposed Join Token

[#1]

Can anyone tell me the security implications of a compromised join token?

[#2 · Accepted solution]

Hello,

1. the obvious one would include the ability to add new hosts to your account which in turn (depending on the application) can start charging you as a the customer money.

2. with the join token they can imitate the appliance you already have and start to take over your DNS traffic and route all the dns traffic to the attackers local solution which they can then steal the information from you company or reroute it to another source. Spying on DNS traffic is very popular and has been in some larger security attacks more recently.

Hope this helps,
Kevin Zettel

[#3]

Thanks Kevin!