services / Azure / Managed Cassandra cluster command output

Azure Managed Instance for Apache Cassandra is a managed NoSQL database; this resource type exposes the data-plane read of output from commands previously run on the cluster.

Command output can contain query results, configuration, and operational data from a production database supporting a single organizational function.

Microsoft.​DocumentDB/​cassandraClusters/​commands/​read

Reading the output of previously-run commands can return query results and operational/database data, enabling exfiltration.

Risks

1. Data exfiltration (CRITICAL)

Scope: HIGH

This privilege may grant access to sensitive data from a single organizational function, or allow interruption of a service supporting a single organizational function.

Links