Accidental discovery of leveraged permissions into OracleCloud for an OracleCloud customer. 

Reported with screenshots and diagnosis allowing a 0-day security hole to be closed. This post will be updated after a 45 day window.