services / Azure / API Management client applications

A client application is a registered OAuth application identity that consumes/authenticates to APIs published through API Management.

These registrations are credential-bearing application identities; their secrets grant authenticated API access.

Microsoft.​ApiManagement/​service/​clientApplications/​write

Registering or updating a client application creates/modifies a credential-bearing application identity, enabling attacker-controlled persistent API access and tampering with app trust/config.

Risks

1. Data manipulation (HIGH)
2. Account persistence (BOOST)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links